Business Information Security Officer

Job Description

Business Information Security Officer (BISO) needed by a national professional services firm, sitting between its central cyber security team and the business.

The role is the link between the two. You are who the business comes to when they want to launch something, change something, or answer a client’s security questionnaire, and you are who the security function relies on to make sure its requirements work in practice.

You would own the ISMS and the certifications that go with it, ISO 27001 and Cyber Essentials Plus, run risk assessments and internal audits across your business lines, and report what matters to senior management clearly. Alongside that you would work directly with operational, digital and development teams so security is built in early rather than added late, and support the assurance requests that come from clients and suppliers.

It needs someone with five to ten years in security, risk or compliance, who has genuinely run an ISMS rather than kept one ticking over, and who can hold a room with senior stakeholders. The role is based in London on a hybrid basis.

Apply now to find out more.