Lead, Business Information Security (BISO)

Your Impact
We're seeking a Business Information Security Lead (BISO) to drive cybersecurity strategy within a forward-leaning business unit focused on AI, large language model (LLM) solutions, and advanced data platforms. In this role, you'll serve as a key advisor to executive leadership, ensuring data security and regulatory compliance are embedded across innovation pipelines. The ideal candidate brings deep experience in securing AI/ML workloads, navigating evolving risk landscapes, and translating cybersecurity principles into actionable guidance for product, data, and engineering teams.
What You Will Do

• Serve as the primary liaison and strategic advisor to business and technology leaders, ensuring cybersecurity considerations are embedded in planning and prioritization.
• Maintain an expert awareness of information security news, trends, and emerging technologies to proactively identify potential risks, assess their impact on the business, and inform strategic cybersecurity planning.
• Advise product, development, and architecture teams on cybersecurity best practices during the design and implementation of new initiatives.
• Conduct technology risk assessments and partner with technical teams to develop mitigation strategies that balance both business agility and security objectives.
• Translate enterprise security policies into actionable, impactful strategies to be implemented at the product and solution level, identifying gaps or redundancies and recommending strategies to mature, rationalize, or develop security capabilities.
• Guide the integration of security controls and practices into the system development lifecycle to promote security-by-design across products, services, and vendor solutions.
• Build and maintain strong relationships with cross-functional stakeholders to drive security maturity and enhance visibility into organizational risk.
• Serve as an escalation point and mentor for junior staff for the most complex support problems.

Minimum Qualifications

• Bachelor's Degree in computer science, computer information systems, engineering, business administration, or related field, or equivalent work experience in lieu of degree
• 7 years of experience in information security
• Experience influencing cross-functional teams and executive stakeholders
• Experience in AI, large language models (LLM) solutions, and advanced data platforms.
• Strong understanding of cybersecurity principles, frameworks (e.g., NIST, ISO 27001), and regulatory requirements
• Strong written and verbal communication with the ability to translate technical concepts to non-technical audiences
• Experience developing and implementing an enterprise security program to meet new business and technology requirements

Preferred Skills/Education

• Hands-on technical experience in risk management, security operations, engineering, or architecture
• Prior experience leading a complex cybersecurity function within a large, matrix enterprise
• Familiarity with retail technology ecosystems, supply chain operations, or e-commerce platforms
• Experience leading change and transformation initiatives
• CISSP Certified Information Systems Security Professional
• Certified Information Security Manager (CISM)
• Certified Information Systems Auditor (CISA)
• Certified in Risk and Information Systems Control (CRISC) or other relevant industry certifications.

About Lowe's
Lowe's Companies, Inc. (NYSE: LOW) is a FORTUNE® 100 home improvement company serving approximately 16 million customer transactions a week in the United States. With total fiscal year 2024 sales of more than $83 billion, Lowe's operates over 1,700 home improvement stores and employs approximately 300,000 associates. Based in Mooresville, N.C., Lowe's supports the communities it serves through programs focused on creating safe, affordable housing, improving community spaces, helping to develop the next generation of skilled trade experts, and providing disaster relief to communities in need. For more information, visit Lowes.com.
Lowe's is an equal opportunity employer and administers all personnel practices without regard to race, color, religious creed, sex, gender, age, ancestry, national origin, mental or physical disability or medical condition, sexual orientation, gender identity or expression, marital status, military or veteran status, genetic information, or any other category protected under federal, state, or local law.