At Parsons, you can imagine a career where you thrive, work with exceptional people, and be yourself. Guided by our leadership vision of valuing people, embracing agility, and fostering growth, we cultivate an innovative culture that empowers you to achieve your full potential. Unleash your talent and redefine what’s possible.
Job Description:
The Business Security & Risk Officer (BSRO) is the business-facing partner for the entire Security & Risk organization: one trusted relationship that connects business leaders to cybersecurity, physical security, government security, enterprise risk, and compliance.
Modeled on the Business Information Security Officer (BISO) role, the BSRO builds lasting relationships with business unit and functional leaders, understands their goals, and spots risk early across every area, not just cyber. The BSRO then brings in the right subject matter experts and works with all stakeholders to reach an approach that lets the business move forward while reducing risk to the enterprise.
The BSRO does not replace the expertise of the Security & Risk groups. The role makes that expertise easy to reach, coordinated, and focused on business outcomes, so the business sees Security & Risk as a partner in getting work done rather than a set of separate gates.
What You’ll be Doing:
Engagement
The BSRO follows each business need from first conversation to a decision the business can act on.
- Understand the business. Learn the business unit's strategy, pipeline, programs, sites, and pressures before risk is on the table.
- Identify risk across all areas. Surface cyber, physical, government security, compliance, operational, third-party, and other enterprise risks tied to what the business wants to do.
- Bring in the right experts. Engage the right Security & Risk SMEs, and Legal, Finance, IT, or HR where needed, with a clear question and timeline.
- Shape an enabling approach. Work with stakeholders to find the option that meets the business goal at an acceptable level of risk, rather than a yes/no answer.
- Drive the decision and follow through. Get the right owner to make and record the risk decision, then track commitments to completion.
Responsibilities
Build and own business relationships
- Serve as the single point of contact into Security & Risk for assigned business units and functions.
- Build trusted relationships with business unit presidents, program and capture leaders, operations, and functional heads through a regular cadence of strategy and planning conversations.
- Maintain a relationship plan for each business partner covering goals, upcoming initiatives, key contacts, and open risk items.
Identify risk early, in all areas
- Spot risk in new pursuits and bids, programs, acquisitions, new countries and facilities, joint ventures, suppliers, and technology adoption, including AI.
- Look across all risk areas: cybersecurity, physical security, government and industrial security, compliance and regulatory, operational, third-party, and reputational.
- Connect related risks that individual groups might see in isolation, such as an insider concern that touches HR, access control, network monitoring, and clearances.
- Bring business context back into the enterprise risk process so the risk register reflects what the business is actually doing.
Bring in the right experts
- Know the capabilities of every Security & Risk group and engage the right SMEs at the right time.
- Frame each request with clear business context, the decision needed, and the timeline, so experts can respond quickly.
- Coordinate across groups so the business gets one aligned answer, not separate and conflicting requirements.
Shape approaches that enable the business
- Facilitate working sessions with business leaders and SMEs to agree on options that meet the business goal and reduce enterprise risk.
- Explain risk in business terms: contract eligibility, revenue, schedule, cost, operations, people, and reputation.
- Present trade-offs and recommended paths, including what it takes to proceed safely, rather than simply approving or blocking.
- Help the business plan for security and compliance requirements early in pursuits and programs, so they are built in instead of added late.
Drive decisions and follow-through
- Make sure risk decisions are made by the right owner, at the right level, and recorded.
- Track agreed actions, risk acceptances, and exceptions to closure, escalating when commitments slip.
- Coordinate Security & Risk support during incidents, investigations, and audits that affect assigned business units.
Represent the business inside Security & Risk
- Bring business priorities, pain points, and upcoming demand back to the Security & Risk groups to inform planning, staffing, and investment.
- Identify policies, processes, or controls that create unnecessary friction and work with owners to simplify them.
- Report on relationship health, risk trends, and outcomes for each business partner to Security & Risk leadership.
Build risk awareness in the business
- Help business leaders understand their risk responsibilities and how to work with Security & Risk.
- Promote training, awareness, and early engagement across all risk areas.
What Required Skills You'll Bring:
- Bachelor's degree and a minimum of 10 years of experience in risk management, security, compliance, or a business-facing advisory role; or a master's degree and 8 years.
- Proven experience as a business partner, relationship manager, or advisor to senior business leaders, building trust and influencing decisions without direct authority.
- Broad understanding of risk across several areas: cybersecurity, physical security, government or industrial security, compliance, and enterprise risk. Deep expertise in all is not expected; knowing when and whom to bring in is.
- Strong business acumen; able to understand how business units win work, deliver programs, and make money.
- Ability to translate technical and regulatory risk into clear business terms and options.
- Skilled facilitator and negotiator who can bring business leaders and experts with different priorities to a shared approach.
- Familiarity with the defense and government contracting environment (e.g., NISPOM, DFARS and CMMC, ITAR and EAR) and enterprise risk frameworks such as COSO ERM or ISO 31000.
- Excellent written and verbal communication with executives and practitioners alike.
- U.S. citizenship and the ability to obtain and maintain a security clearance.
What Desired Skills You'll Bring:
- Advanced degree in business, risk management, or a related field.
- Experience as a BISO, BRM, risk partner, or similar business-aligned role in a large enterprise.
- Experience in the defense industrial base or another highly regulated industry.
- Experience supporting business development, capture, or M&A with risk input.
- One or more credentials such as BRMP or CBRM, CRISC, CPP, CISSP, CCEP, or RIMS-CRMP.
Security Clearance Requirement:
NoneThis position is part of our Corporate team.For over 80 years, Parsons Corporation, has shaped the future of the defense, intelligence, and critical infrastructure markets. Our employees work in a close-knit team environment to find new, innovative ways to deliver smart solutions that are used and valued by customers around the world. By combining unique technologies with deep domain expertise across cybersecurity, missile defense, space, connected infrastructure, transportation, smart cities, and more, we're providing tomorrow's solutions today.Salary Range: $125,100.00 - $225,200.00We value our employees and want our employees to take care of their overall wellbeing, which is why we offer best-in-class benefits such as medical, dental, vision, paid time off, Employee Stock Ownership Plan (ESOP), 401(k), life insurance, flexible work schedules, and holidays to fit your busy lifestyle!This position will be posted for a minimum of 3 days and will continue to be posted for an average of 30 days until a qualified applicant is selected or the position has been cancelled.Parsons is an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, veteran status or any other protected status.We truly invest and care about our employee’s wellbeing and provide endless growth opportunities as the sky is the limit, so aim for the stars! Imagine next and join the Parsons quest—APPLY TODAY!Parsons is aware of fraudulent recruitment practices. To learn more about recruitment fraud and how to report it, please refer to https://www.parsons.com/fraudulent-recruitment/.
Skills Required
- Bachelor’s degree and at least 10 years of experience in information security, cybersecurity, or a related field; or a master’s degree and 9 years of experience
- Demonstrable experience as a senior information security executive
- Experience advising executives and key stakeholders on security matters in a consultative role
- Experience designing and implementing global security solutions
- Deep knowledge of information security management frameworks, including ISO 27001 and NIST CSF, and regulatory compliance requirements
- Strong communication skills with executives and technical teams
- Strong project management, data analytics, problem-solving, and leadership skills
- CISSP, CISM, CRISC, CISA, or at least two of these certifications
- Advanced degree in a related field
- Experience with contract and vendor negotiations
- Expertise in cybersecurity risk management, including assessments and solution recommendations
- Prior experience as a CISO of a medium or large enterprise
Parsons Corporation Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Parsons Corporation and has not been reviewed or approved by Parsons Corporation.
-
Retirement Support — Retirement programs are framed as a major value driver, with an ESOP alongside a 401(k) match and additional stock-purchase options contributing meaningfully to total rewards. This structure is positioned as especially attractive for employees who value long-term wealth-building over immediate cash.
-
Healthcare Strength — Health coverage is described as broad and choice-rich, with multiple plan types (PPO, HDHP, and some HMO networks) plus dental, vision, EAP, and wellness resources. The availability of different plan designs and national-carrier coverage supports varied employee needs.
-
Leave & Time Off Breadth — Time-off offerings are portrayed as competitive, including PTO, holidays, flexible schedules such as a 9/80 option for eligible roles, and floating holidays in the U.S. Paid parental leave of 160 hours is also highlighted as a meaningful component of the overall package.
Parsons Corporation Insights
What We Do
Parsons is a digitally enabled solutions provider with a focus on making the world safer, smarter, healthier, more sustainable, and more connected. Founded in 1944, Parsons primarily serves the defense, security, and infrastructure markets. Uniquely qualified to deliver cyber/converged security, technology-based intellectual property, and other innovative services, the corporation delivers state-of-the-art solutions to federal, regional, and local government agencies as well as to private industrial customers worldwide. Parsons has a reputation for inclusion and diversity and has been named to the Ethisphere Institute’s list of World’s Most Ethical Companies for 10 consecutive years. Parsons facilitates a culture of innovation by encouraging collaboration among its employees and providing opportunities for career growth. With offices around the globe, people of varied talents and backgrounds, and a wide range of exciting projects, the possibilities at Parsons are endless. For more about Parsons, visit www.parsons.com. Mission: Delivering innovative infrastructure, defense, and security solutions to enable a more sustainable, safer, smarter, and more connected world.
