Business Security & Risk Officer (BSRO)

In a world of possibilities, pursue one with endless opportunities. Imagine Next!At Parsons, you can imagine a career where you thrive, work with exceptional people, and be yourself. Guided by our leadership vision of valuing people, embracing agility, and fostering growth, we cultivate an innovative culture that empowers you to achieve your full potential. Unleash your talent and redefine what’s possible.

Job Description:

The Business Security & Risk Officer (BSRO) is the business-facing partner for the entire Security & Risk organization: one trusted relationship that connects business leaders to cybersecurity, physical security, government security, enterprise risk, and compliance. 

Modeled on the Business Information Security Officer (BISO) role, the BSRO builds lasting relationships with business unit and functional leaders, understands their goals, and spots risk early across every area, not just cyber. The BSRO then brings in the right subject matter experts and works with all stakeholders to reach an approach that lets the business move forward while reducing risk to the enterprise. 

The BSRO does not replace the expertise of the Security & Risk groups. The role makes that expertise easy to reach, coordinated, and focused on business outcomes, so the business sees Security & Risk as a partner in getting work done rather than a set of separate gates. 

 

What You’ll be Doing:

Engagement 

The BSRO follows each business need from first conversation to a decision the business can act on. 

• Understand the business. Learn the business unit's strategy, pipeline, programs, sites, and pressures before risk is on the table. 

• Identify risk across all areas. Surface cyber, physical, government security, compliance, operational, third-party, and other enterprise risks tied to what the business wants to do. 

• Bring in the right experts. Engage the right Security & Risk SMEs, and Legal, Finance, IT, or HR where needed, with a clear question and timeline. 

• Shape an enabling approach. Work with stakeholders to find the option that meets the business goal at an acceptable level of risk, rather than a yes/no answer. 

• Drive the decision and follow through. Get the right owner to make and record the risk decision, then track commitments to completion. 

 

Responsibilities 

Build and own business relationships 

• Serve as the single point of contact into Security & Risk for assigned business units and functions. 

• Build trusted relationships with business unit presidents, program and capture leaders, operations, and functional heads through a regular cadence of strategy and planning conversations. 

• Maintain a relationship plan for each business partner covering goals, upcoming initiatives, key contacts, and open risk items. 

Identify risk early, in all areas 

• Spot risk in new pursuits and bids, programs, acquisitions, new countries and facilities, joint ventures, suppliers, and technology adoption, including AI. 

• Look across all risk areas: cybersecurity, physical security, government and industrial security, compliance and regulatory, operational, third-party, and reputational. 

• Connect related risks that individual groups might see in isolation, such as an insider concern that touches HR, access control, network monitoring, and clearances. 

• Bring business context back into the enterprise risk process so the risk register reflects what the business is actually doing. 

Bring in the right experts 

• Know the capabilities of every Security & Risk group and engage the right SMEs at the right time. 

• Frame each request with clear business context, the decision needed, and the timeline, so experts can respond quickly. 

• Coordinate across groups so the business gets one aligned answer, not separate and conflicting requirements. 

Shape approaches that enable the business 

• Facilitate working sessions with business leaders and SMEs to agree on options that meet the business goal and reduce enterprise risk. 

• Explain risk in business terms: contract eligibility, revenue, schedule, cost, operations, people, and reputation. 

• Present trade-offs and recommended paths, including what it takes to proceed safely, rather than simply approving or blocking. 

• Help the business plan for security and compliance requirements early in pursuits and programs, so they are built in instead of added late. 

Drive decisions and follow-through 

• Make sure risk decisions are made by the right owner, at the right level, and recorded. 

• Track agreed actions, risk acceptances, and exceptions to closure, escalating when commitments slip. 

• Coordinate Security & Risk support during incidents, investigations, and audits that affect assigned business units. 

Represent the business inside Security & Risk 

• Bring business priorities, pain points, and upcoming demand back to the Security & Risk groups to inform planning, staffing, and investment. 

• Identify policies, processes, or controls that create unnecessary friction and work with owners to simplify them. 

• Report on relationship health, risk trends, and outcomes for each business partner to Security & Risk leadership. 

Build risk awareness in the business 

• Help business leaders understand their risk responsibilities and how to work with Security & Risk. 

• Promote training, awareness, and early engagement across all risk areas. 

What Required Skills You'll Bring:

• Bachelor's degree and a minimum of 10 years of experience in risk management, security, compliance, or a business-facing advisory role; or a master's degree and 8 years. 

• Proven experience as a business partner, relationship manager, or advisor to senior business leaders, building trust and influencing decisions without direct authority. 

• Broad understanding of risk across several areas: cybersecurity, physical security, government or industrial security, compliance, and enterprise risk. Deep expertise in all is not expected; knowing when and whom to bring in is. 

• Strong business acumen; able to understand how business units win work, deliver programs, and make money. 

• Ability to translate technical and regulatory risk into clear business terms and options. 

• Skilled facilitator and negotiator who can bring business leaders and experts with different priorities to a shared approach. 

• Familiarity with the defense and government contracting environment (e.g., NISPOM, DFARS and CMMC, ITAR and EAR) and enterprise risk frameworks such as COSO ERM or ISO 31000. 

• Excellent written and verbal communication with executives and practitioners alike. 

• U.S. citizenship and the ability to obtain and maintain a security clearance. 

What Desired Skills You'll Bring:

• Advanced degree in business, risk management, or a related field. 

• Experience as a BISO, BRM, risk partner, or similar business-aligned role in a large enterprise. 

• Experience in the defense industrial base or another highly regulated industry. 

• Experience supporting business development, capture, or M&A with risk input. 

• One or more credentials such as BRMP or CBRM, CRISC, CPP, CISSP, CCEP, or RIMS-CRMP. 

Security Clearance Requirement:

NoneThis position is part of our Corporate team.For over 80 years, Parsons Corporation, has shaped the future of the defense, intelligence, and critical infrastructure markets. Our employees work in a close-knit team environment to find new, innovative ways to deliver smart solutions that are used and valued by customers around the world. By combining unique technologies with deep domain expertise across cybersecurity, missile defense, space, connected infrastructure, transportation, smart cities, and more, we're providing tomorrow's solutions today.Salary Range: $125,100.00 - $225,200.00We value our employees and want our employees to take care of their overall wellbeing, which is why we offer best-in-class benefits such as medical, dental, vision, paid time off, Employee Stock Ownership Plan (ESOP), 401(k), life insurance, flexible work schedules, and holidays to fit your busy lifestyle!This position will be posted for a minimum of 3 days and will continue to be posted for an average of 30 days until a qualified applicant is selected or the position has been cancelled.Parsons is an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, veteran status or any other protected status.We truly invest and care about our employee’s wellbeing and provide endless growth opportunities as the sky is the limit, so aim for the stars! Imagine next and join the Parsons quest—APPLY TODAY!

Parsons is aware of fraudulent recruitment practices. To learn more about recruitment fraud and how to report it, please refer to https://www.parsons.com/fraudulent-recruitment/.