Sr. Principal, Business Information Security Officer (BISO)

About the role: 

Blackbaud unleashes the potential of the people and organizations who change the world, and we’re growing our team. As the leading software provider exclusively dedicated to powering social impact, expand what is possible across the nonprofit and education sectors, at companies committed to social responsibility, and for individual change makers.    

The Sr. Principal Business Information Security Officer (BISO) for India will serve as the primary security advisor and risk partner to India-based business, technology, and delivery teams. This is the first BISO role in the India office, responsible for establishing the BISO function locally while operating as part of the global Cyber Security organization. 

The BISO bridges business objectives and cybersecurity requirements, ensuring that security risks are understood, managed, and communicated in a way that enables business growth, customer trust, and regulatory compliance. he BISO influences outcomes and strategy; they do not own delivery of controls. This role is highly collaborative and influence-driven, not a delivery or project management function. 

The India BISO will work closely with: 

• India engineering, product, and operations leadership 

• Global Cyber Security, GRC, and Risk teams 

• US and other regional BISOs (as the program expands) 

What you'll do:

•  Serve as a trusted security advisor to India-based business and technology leaders by embedding security and risk thinking early into planning, delivery, and operational decisions, and translating complex risk into clear business impact and options.
• Identify, assess, and guide the management of information security and technology risks affecting India-based teams and services, including advising on mitigation, acceptance, or escalation in line with enterprise risk appetite.
• Enable strong security governance across India operations by partnering with global security teams to implement enterprise standards effectively, tailoring global initiatives to local delivery realities without weakening controls.
• Support business confidence and customer trust by contributing to audits, regulatory obligations, customer security inquiries, contract reviews, and third-party risk discussions tied to India-based delivery.
• Act as a two-way communication bridge between the business and global security leadership, proactively surfacing emerging risks, trends, and concerns while contributing to executive-ready reporting and metrics.
• Help establish and mature the Business Information Security Officer operating model in India by defining engagement expectations, governance touchpoints, success measures, and supporting future scale through collaboration with global peers.

​​What you'll bring:  

• 12+ years of experience in information security, technology risk, GRC, or cybersecurity advisory roles 

• Demonstrated experience partnering with engineering, product, or delivery organizations 

• Strong understanding of, Enterprise security frameworks (e.g., NIST, ISO 27001) and Risk management concepts and decision-making 

• Experience operating in a global, matrixed organization, working with stakeholders across geographies 

• Excellent communication skills with the ability to engage senior business and technology leaders 

• Able to work flexible hours as required by business priorities  

• Ability to drive work that meets all minimum standards of quality, security and operability.