Business Info Security Officer II

What You'll Do We’re looking for a Business Information Security Officer (BISO) to lead and influence information security strategy for our Retirement and Income Solutions (RIS) division, including Principal Bank, Principal Custody Solutions, and Workplace Services and Retirement Savings (WSRS). In this role, you’ll serve as a trusted advisor to business and technology leaders, translating enterprise security strategy into practical, business-aligned outcomes. You’ll help shape how security enables innovation, strengthens resilience, and builds confidence with clients, regulators, senior leadership, and the Board. This is a highly visible role for someone who brings both breadth and depth across information security domains, has a strong eye for business, and the confidence to engage effectively in client-facing, regulatory, and executive-level settings. You’ll influence both the direction of the business unit’s security practices and the broader corporate information security program. What You'll Do: Serve as the strategic information security leader for RIS, aligning security priorities with business goals and technology strategy. Advise business leaders and corporate information security partners on emerging threats, industry developments, regulatory changes, and technology risks affecting the business. Build strong partnerships across compliance, audit, privacy, fraud, supplier management, and other key functions to protect the company’s assets and strengthen risk-informed decision-making. Bring an information security lens to business initiatives, projects, and risk assessments, helping teams identify issues early and implement practical risk management strategies. Partner with internal security teams to support client, regulatory, and external audits and assessments, address findings, and strengthen controls. Provide leadership and oversight for incident response planning, security event management, and investigations as needed. Drive a strong culture of security awareness and accountability across the business, with oversight of policies and practices related to identity and access management, software security, patching, data protection, and broader IT risk. Represent information security in client-facing conversations and help address questions from customers, regulators, senior management, and the Board. Contribute to security reporting, metrics, strategy, roadmaps, and control inventories that help the business make informed investment and risk decisions. Lead and develop talent through coaching, performance management, recognition, and creating an environment that supports continuous learning and diverse perspectives. Operating at the intersection of financial services and technology, Principal builds financial tools that help our customers live better lives. We take pride in being a purpose-led firm, motivated by our mission to make financial security accessible to all. Our mission, integrity, and customer focus have made us a trusted leader for more than 140 years! Who You Are You have a Bachelor’s degree in a computer-related field or equivalent experience, plus at least 10 years of experience as an IT professional. You have strong business acumen and the ability to align security priorities with organizational strategy. You are confident and engaging with experience presenting to clients, regulators, senior leaders, and Boards. You have strong people leadership skills, with experience developing talent and building high-performing teams through direct or indirect leadership. Skills That Will Help You Stand Out Experience in financial services is strongly valued. Industry certifications such as CISSP or cloud security credentials are preferred; practical experience applying what you’ve learned is essential. Salary Range Information Salary ranges below reflect targeted base salaries. Non-sales positions have the opportunity to participate in a bonus program. Sales positions are eligible for sales incentives, and in some instances a bonus plan, whereby total compensation may far exceed base salary depending on individual performance. Actual compensation for all roles will be based upon geographic location, work experience, education, licensure requirements and/or skill level and will be finalized at the time of offer. Salary Range (Non-Exempt expressed as hourly; Exempt expressed as yearly) $157000 - $213000 / year Time Off Program Flexible Time Off (FTO) is provided to salaried (exempt) employees and provides the opportunity to take time away from the office with pay for vacation, personal or short-term illness. Employees don’t accrue a bank of time off under FTO and there is no set number of days provided. Pension Eligible Yes Work Environments This role offers an in-office, hybrid (blending at least three office days in a typical workweek) work arrangement from our Des Moines, IA headquarters. Work Authorization/Sponsorship At this time, we're not considering applicants that need any type of immigration sponsorship (additional work authorization or permanent work authorization) now or in the future to work in the United States. This includes, but IS NOT LIMITED TO: F1-OPT, F1-CPT, H-1B, TN, L-1, J-1, etc. For additional information around work authorization needs please use the following links. Nonimmigrant Workers and Green Card for Employment-Based Immigrants Investment Code of Ethics For Principal Asset Management positions, you’ll need to follow an Investment Code of Ethics related to personal and business conduct as well as personal trading activities for you and members of your household. These same requirements may also apply to other positions across the organization. Experience Principal At Principal, we value connecting on both a personal and professional level. Together, we’re imagining a more purpose-led future for financial services – and that starts with you. Our success depends on the unique experiences, backgrounds, and talents of our employees. And we support our employees the same way we support our customers: with comprehensive, competitive benefit offerings crafted to protect their physical, financial, and social well-being. Check out our careers site to learn more about our purpose, values and benefits. Principal is an Equal Opportunity Employer All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status. Posting Window We will accept applications for 3 full days following the Original Posting Date, after which the posting may remain open or be removed based upon applications received. If we choose to post the job again, we will accept additional applications for at least 1 full day following the Most Recently Posted Date. Please submit applications in a timely manner as there is no guarantee the posting will be available beyond the applicable deadline. Original Posting Date 7/9/2026 Most Recently Posted Date 7/9/2026 Principal uses artificial intelligence tools to assist in reviewing and evaluating job applications, fraud prevention, and candidate matching and comparisons. These AI tools support our human recruiters in the initial review process but do not make final hiring decisions without human involvement. By submitting your application, you acknowledge this use of AI in our recruitment process. Please review our Workforce (U.S.) Privacy Notice for more details on our practices and your data privacy rights. We’re looking for a Business Information Security Officer (BISO) to lead and influence information security strategy for our Retirement and Income Solutions (RIS) division, including Principal Bank, Principal Custody Solutions, and Workplace Services and Retirement Savings (WSRS). In this role, you’ll serve as a trusted advisor to business and technology leaders, translating enterprise security strategy into practical, business-aligned outcomes. You’ll help shape how security enables innovation, strengthens resilience, and builds confidence with clients, regulators, senior leadership, and the Board. This is a highly visible role for someone who brings both breadth and depth across information security domains, has a strong eye for business, and the confidence to engage effectively in client-facing, regulatory, and executive-level settings. You’ll influence both the direction of the business unit’s security practices and the broader corporate information security program. What You'll Do: Serve as the strategic information security leader for RIS, aligning security priorities with business goals and technology strategy. Advise business leaders and corporate information security partners on emerging threats, industry developments, regulatory changes, and technology risks affecting the business. Build strong partnerships across compliance, audit, privacy, fraud, supplier management, and other key functions to protect the company’s assets and strengthen risk-informed decision-making. Bring an information security lens to business initiatives, projects, and risk assessments, helping teams identify issues early and implement practical risk management strategies. Partner with internal security teams to support client, regulatory, and external audits and assessments, address findings, and strengthen controls. Provide leadership and oversight for incident response planning, security event management, and investigations as needed. Drive a strong culture of security awareness and accountability across the business, with oversight of policies and practices related to identity and access management, software security, patching, data protection, and broader IT risk. Represent information security in client-facing conversations and help address questions from customers, regulators, senior management, and the Board. Contribute to security reporting, metrics, strategy, roadmaps, and control inventories that help the business make informed investment and risk decisions. Lead and develop talent through coaching, performance management, recognition, and creating an environment that supports continuous learning and diverse perspectives. Operating at the intersection of financial services and technology, Principal builds financial tools that help our customers live better lives. We take pride in being a purpose-led firm, motivated by our mission to make financial security accessible to all. Our mission, integrity, and customer focus have made us a trusted leader for more than 140 years! You have a Bachelor’s degree in a computer-related field or equivalent experience, plus at least 10 years of experience as an IT professional. You have strong business acumen and the ability to align security priorities with organizational strategy. You are confident and engaging with experience presenting to clients, regulators, senior leaders, and Boards. You have strong people leadership skills, with experience developing talent and building high-performing teams through direct or indirect leadership. Skills That Will Help You Stand Out Experience in financial services is strongly valued. Industry certifications such as CISSP or cloud security credentials are preferred; practical experience applying what you’ve learned is essential.