Business Information Security Officer (BISO)

About the role

The Business Information Security Officer (BISO) will lead cybersecurity for a portfolio of software products and digital solutions. Based onsite in Liechtenstein, you will shape security strategy, embed security‑by‑design, and ensure compliance across cloud, SaaS, and AI‑enabled offerings.

Key responsibilities

• Define and deliver the cybersecurity strategy for multiple software products.
• Lead a specialist security team covering information security, product security, and cyber risk.
• Embed security‑by‑design principles across software engineering, cloud environments, AI solutions, and DevSecOps practices.
• Identify, assess, and manage information and product security risks.
• Ensure compliance with ISO 27001, SOC 2, NIST, CRA, NIS2, GDPR and emerging AI regulations.
• Own security governance, risk management, ISMS activities and audit readiness.
• Partner with engineering and product teams to strengthen application security, vulnerability management and cyber resilience.
• Provide executive‑level reporting on cyber risk, compliance and security maturity.

Required profile

• Significant senior cybersecurity leadership experience (BISO, Head of Security, Security Director, Product Security Leader).
• Strong background in SaaS, cloud security, application security, DevSecOps and secure software development.
• Proven track record implementing enterprise security programmes aligned to ISO 27001, SOC 2 and NIST frameworks.
• Ability to influence senior stakeholders and translate complex security requirements into practical business solutions.
• Experience securing customer‑facing software products and digital platforms.

Required skills

• Cloud security
• Application security
• DevSecOps
• Secure software development
• ISO 27001
• SOC 2
• NIST frameworks
• GDPR
• NIS2
• CRA compliance