Business Information Security Officer

About this role

Business Information Security Officer, North America P&C Req Id - 2026-571 Recruitment Start Date - 06/12/2026 End Date - 8/12/2026 Location: New York, NY; New Jersey; Boston, MA; or Philadelphia, PA Work Arrangement: Hybrid Reports To: Chief Business Technology Officer, North America P&C Employment Type: Full Time

Help us insure it Tokio Marine HCC is a global industry-leading specialty insurance group, backed by the strength and stability of the Tokio Marine Group. Offering over 100 classes of specialty insurance, we empower clients to pursue opportunities confidently through our “Mind Over Risk” philosophy. More than an insurance company, we are an organization built on innovation, unity, and trust. At our core, we are Always Advancing, driven by innovation and an entrepreneurial spirit that keeps us moving forward. Our people are Experts in Tomorrow, using curiosity and smart working to anticipate what’s next. With a culture rooted in Reaching Out, we foster genuine collaboration and support, ensuring every individual has the opportunity to succeed and make a difference.

Role Overview The Business Information Security Officer, North America P&C serves as the senior security leader and strategic partner to the North America P&C business and technology organizations. Reporting to the Chief Business Technology Officer, North America P&C, this role works across business units to improve transparency, accelerate security outcomes, and strengthen the organization’s ability to operate securely and resiliently. This leader will partner closely with TMHCC’s CISO, enterprise security function, architecture, infrastructure, engineering, business leadership, and technology teams to align security strategy with business priorities while driving practical, measurable improvements across the technology landscape. The role is responsible for helping business units adopt secure-by-design practices, proactively address vulnerabilities, improve remediation execution, and mature security governance and operational effectiveness. This position will also lead the development of a remediation-focused Center of Excellence that provides hands-on guidance, architectural support, and engineering expertise to accelerate risk reduction across a federated environment.

Key Responsibilities Enterprise Security Partnership and Governance • Partner with enterprise security teams to shape and influence security policies, standards, implementation approaches, and business-aligned security priorities.

• Manage segment security posture in alignment with the security ambassador scorecard and supplement enterprise scorecard reporting with segment-level controls.

• Ensure strong understanding of enterprise security requirements and identify gaps, inconsistencies, and implementation challenges across business units.

• Translate enterprise security objectives into practical, actionable plans for North America P&C.

• Provide leadership visibility into security posture, risks, remediation progress, and operational challenges.

• Facilitate alignment between enterprise security, business leadership, and technology teams to improve consistency, execution, and accountability.

Business Unit Security Strategy and Roadmap Development • Develop a deep understanding of the technology landscape across federated business units, including applications, infrastructure, platforms, integrations, and operational processes.

• Partner with business and technology leaders to define security roadmaps aligned to business priorities and operational realities.

• Drive adoption of secure-by-design principles and proactive security practices across new initiatives, technology changes, and transformation efforts.

• Promote early security engagement during planning, architecture, engineering, and delivery phases.

• Help business units prioritize and accelerate remediation of critical vulnerabilities and control gaps.

Security Architecture and Investment Enablement • Collaborate with architecture teams to recommend security-focused architectural improvements and strategic technology direction.

• Identify systemic blockers impacting security outcomes and recommend practical solutions to improve execution velocity.

• Partner with the PMO and leadership teams to influence funding, prioritization, and sequencing decisions related to security initiatives.

• Advocate for investments that improve resilience, reduce operational risk, and strengthen long-term security maturity.

• Support enterprise and business-led transformation initiatives to ensure security considerations are embedded appropriately.

Remediation Center of Excellence • Design and implement a remediation-focused Center of Excellence supporting the broad technology landscape of North America P&C.

• Build scalable processes, standards, and engineering practices that improve remediation consistency and effectiveness.

• Provide advisory and hands-on support to business units on architecture, engineering, vulnerability remediation, and secure implementation practices.

• Establish repeatable approaches to accelerate remediation timelines and improve risk reduction outcomes.

• Drive collaboration between infrastructure, engineering, application, cloud, and security teams to improve execution and accountability.

Operational Transparency and Risk Reduction • Develop meaningful metrics, reporting, and dashboards that provide transparency into security posture, remediation progress, operational risks, and business impact.

• Monitor emerging risks, technology changes, and operational trends that may impact the organization’s security posture.

• Promote measurable outcomes and data-driven decision-making across security and technology initiatives.

• Support cyber resilience, recovery preparedness, and operational continuity initiatives across the organization.

What You Bring • You have 10+ years of experience in information security, cybersecurity, technology risk, or enterprise tec

Similar jobs

• Senior Business Information Security Officer — M&T Bank · Buffalo, NY
• Principal Business Information Security Officer — Rocket · Seattle, WA
• Information System Security Officer — Draper · Cambridge, MA
• Information System Security Officer — CNI · Ellsworth AFB, SD
• Information System Security Officer — Spacex · Hawthorne, CA
• Principal Business Information Security Officer (BISO) — LPL Financial · Fort Mill/Charlotte | San Diego
• Information Systems Security Officer — Ardentmc · Washington, D.C. Metro
• Information Systems Security Officer — Andurilindustries · Irvine, California, United States