Business Information Security Officer

The Business Information Security Officer (BISO) for Aerospace serves as the strategic cybersecurity and compliance leader embedded within the Aerospace business unit. This role bridges the gap between enterprise cybersecurity strategy and business execution, ensuring the Aerospace segment meets all regulatory, contractual, and customer security obligations-especially those related to NIST SP 800171, CMMC, and DoD cybersecurity requirements.

The BISO advises senior business leaders, drives compliance activities, manages cybersecurity risk, and supports secure and compliant program execution across the Aerospace portfolio.

Key Responsibilities

• Act as the primary cybersecurity advisor to Aerospace business leadership, ensuring alignment with enterprise security strategy.
• Lead and maintain ongoing compliance with NIST 800171, CMMC, and DFARS cybersecurity requirements.
• Oversee creation and maintenance of SSPs, POA&Ms, and all supporting artifacts.
• Identify and communicate cybersecurity risks across Aerospace operations and programs.
• Support program capture, bids, proposals, and customer engagements with security requirements and compliance planning.
• Partner with IT, Engineering, Supply Chain, Operations, and Legal to ensure security is embedded in processes and solutions.
• Serve as an escalation point for incidents impacting Aerospace and coordinate with Security Operations and leadership.
• Ensure readiness for audits, assessments, and customer reviews related to NIST/CMMC compliance.
• Manage compliance with export control procedures

Qualifications

• Only US Citizens, Green Card holders, political asylees, or refugees are eligible to apply.
• 8-10+ years of experience in cybersecurity, compliance, or risk management.
• Strong background with NIST SP 800171, CMMC, or DoD cybersecurity frameworks.
• Experience supporting engineering, manufacturing, or aerospace/defense programs.
• Ability to communicate complex cybersecurity topics in business terms.
• Bachelor's degree in cybersecurity, IT, engineering, or related field (or equivalent experience).
• Preferred:
  • CISSP, CISM, CCSP, or similar certifications.
  • Experience executing DFARS 252.2047012 and related DoD compliance activities.
  • Familiarity with OT, ICS, or secure product lifecycle environments.

About us:

Here at PPG we make it happen, and we seek candidates of the highest integrity and professionalism who share our values, with the commitment and drive to strive today to do better than yesterday - everyday.

PPG: WE PROTECT AND BEAUTIFY THE WORLD

Through leadership in innovation, sustainability and color, PPG helps customers in industrial, transportation, consumer products, and construction markets and aftermarkets to enhance more surfaces in more ways than does any other company. To learn more, visit www.ppg.com and follow @ PPG on Twitter.

At PPG we use AI in the hiring process to make the process more efficient. AI tools do not make hiring decisions. You can learn more by going to https://careers.ppg.com/us/en/candidate-resources.

PPG provides equal opportunity to all candidates and employees. We offer an opportunity to grow and develop your career in an environment that provides a fulfilling workplace for employees, creates an environment for continuous learning, and embraces the ideas and diversity of others. All qualified applicants will receive consideration for employment without regard to sex, pregnancy, race, color, creed, religion, national origin, age, disability status, marital status, veteran status, sexual orientation, gender identity or expression. If you need an adjustment due to a disability, please email recruiting@ppg.com.

PPG values your feedback on our recruiting process. We encourage you to visit Glassdoor.com and provide feedback on the process, so that we can do better today than yesterday.

Benefits will be discussed with you by your recruiter during the hiring process.

Gamele de salarii i de beneficii ale PPG pot varia in funcie de locaie, ceea ce ne permite s compensm angajaii in mod competitiv pe diferite piee geografice. PPG ia in considerare mai muli factori in luarea deciziilor de compensare, inclusiv, dar fr a se limita la, seturi de abiliti, experien i formare, calificri i educaie, licene i certificri, i alte nevoi organizaionale. Se pot aplica i alte stimulente.

Programele noastre de beneficii pentru angajai sunt concepute pentru a contribui la sntatea i bunstarea angajailor notri. Orice acoperiri i beneficii ale asigurrii vor fi in conformitate cu termenii i condiiile planurilor aplicabile i cu documentele aferente planului de guvernare.