Secure innovation, protect what matters, and shape the future of construction software. As Business Information Security Officer (BISO) for Construction Software at Hilti, you will define and drive the security strategy for a fast-growing software business, balancing innovation, compliance, and risk. This is a senior Line of Defense 1 role with real decision-making power, close collaboration with business and technology leaders, and direct impact on the security, compliance, and resilience of the Construction Software portfolio worldwide. This is a full-time position, available immediately, with a travel requirement of up to 15%.
Tasks
- Be the security leader for Hilti’s Construction Software business, setting direction and ensuring execution across people, processes, and technology.
- Define, implement, and continuously evolve the Construction Software security program in alignment with Hilti’s overall information security strategy.
- Lead and develop the Construction Software security team, acting as a trusted advisor to senior business and technology stakeholders.
- Identify, assess, and manage information and product security risks, translating threats into pragmatic mitigation measures.
- Ensure compliance with relevant legal, regulatory, and industry requirements (e.g. ISO 27001, SOC 2, CRA, NIS2, EU AI regulations).
- Own and maintain the BU Construction Software SOC 2 certification and actively support Group ISO 27001 certification.
- Drive the development and implementation of ISMS, security architecture, internal controls, and cyber risk management for Construction Software.
- Independently manage security-related initiatives and projects from requirements definition through implementation.
- Act as a key interface to the Group CISO and other Information Security Officers, ensuring alignment and knowledge sharing.
- Coordinate internal and external audits and ensure timely implementation of resulting improvement measures.
Requirements
- Master’s degree in Computer Science, Information Security, Cybersecurity, or a related field, combined with deep knowledge of security standards and frameworks (e.g. ISO 27001, SOC 2, NIST).
- Several years in senior or decision-making information or software security roles, with demonstrated ability to design and implement enterprise-level security programs.
- Strong experience translating regulatory and legal requirements into pragmatic, business-ready security controls and risk mitigation measures.
- Ability to take ownership, make decisions, and clearly convey complex security topics to senior, non-technical stakeholders in a global matrix environment.
- Solid understanding of cloud-based software environments, including areas such as Cloud & AI Security, DevSecOps, and application security.
Benefits
- Diverse global headquarters community of over 2,100 colleagues from 70 nationalities.
- Early responsibility and the opportunity to make a visible impact on business success.
- Long-term career growth supported by transparent development framework and career opportunities across functions, regions, and roles.
- Flexible and trust-based working model including remote work, workation, and sabbaticals.
- Relocation and family support including childcare services and integration assistance.
- Opportunities to contribute to social impact initiatives both locally and globally.
- Inclusive culture supported by more than 60 employee-led activity networks.
- Modern campus with onsite gym, restaurants, mobility benefits, and outdoor activities.
Bist du Teil dieses Unternehmens?
Dieses Unternehmensprofil wurde automatisch erstellt. Wenn du für Hilti AG arbeitest, kannst du das Profil jetzt beanspruchen und verifizieren – kostenlos und in wenigen Minuten.
Über uns
Das Team
HQ offers a collaborative environment where architecture decisions, platform reliability, and secure-by-design engineering translate into real impact for customers and teams. Cross-functional teams work side by side with business leaders to deliver solutions at global scale.