Business Information Security Officer (BISO) – Construction Software

Secure Innovation. Protect What Matters. Shape the Future of Construction Software.

Are you ready to own and shape security where digital construction solutions meet real world impact? As Business Information Security Officer (BISO) for Construction Software at Hilti, you will define and drive the security strategy for a fast growing software business, balancing innovation, compliance, and risk. This is a senior Line of Defense 1 role with real decision making power, close collaboration with business and technology leaders, and direct impact on how secure, compliant, and resilient our Construction Software portfolio is worldwide.

This is a full time position, available immediately.

What You'll do

You will be the security leader for Hilti’s Construction Software business, setting direction and ensuring execution across people, processes, and technology. Your key responsibilities include:

• Define, implement, and continuously evolve the Construction Software security program in alignment with Hilti’s overall information security strategy.
• Lead and develop the Construction Software security team, acting as a trusted advisor to senior business and technology stakeholders.
• Identify, assess, and manage information and product security risks, translating threats into pragmatic mitigation measures.
• Ensure compliance with relevant legal, regulatory, and industry requirements (e.g. ISO 27001, SOC 2, CRA, NIS2, EU AI regulations).
• Own and maintain the BU Construction Software SOC 2 certification and actively support Group ISO 27001 certification.
• Drive the development and implementation of ISMS, security architecture, internal controls, and cyber risk management for Construction Software.
• Independently manage security related initiatives and projects from requirements definition through implementation.
• Act as a key interface to the Group CISO and other Information Security Officers, ensuring alignment and knowledge sharing.
• Coordinate internal and external audits and ensure timely implementation of resulting improvement measures.

What You’ll Bring

To help you succeed, we’ll provide a strong network, clear mandate, and the opportunity to make a visible impact. You bring the expertise, leadership, and mindset to make it happen:

• Master’s degree in Computer Science, Information Security, Cybersecurity, or a related field, combined with deep knowledge of security standards and frameworks (e.g. ISO 27001, SOC 2, NIST).
• Several years in senior or decision making information or software security roles, with demonstrated ability to design and implement enterprise level security programs.
• Strong experience translating regulatory and legal requirements into pragmatic, business ready security controls and risk mitigation measures.
• Ability to take ownership, make decisions, and clearly convey complex security topics to senior, non technical stakeholders in a global matrix environment.
• Solid understanding of cloud based software environments, including areas such as Cloud & AI Security, DevSecOps, and application security.

What’s In It for You

We really value our people, and we've worked hard to develop a reward package that reflects this, creating your future to be just how you would want it. Some of our benefits include:

• Connection with a diverse community of over 2,100 colleagues from 70 nationalities in a region where Liechtenstein, Austria, and Switzerland intersect.
• Employee groups actively supporting causes like female empowerment and the LGBTQIA+ community.
• Leisure activities like mountain biking and tennis.
• Opportunities for community engagement both locally and internationally.
• Shared e-bikes, an on-site gym, dining options, learning opportunities, financial guidance, free parking, fuel discounts, workation, sabbatical, home office opportunity, flexible and trust-based working hours, meditation/ relaxation rooms, Hilti tool rental service, massage possibilities, and relocation support.