BISO - Financial Services

Sterlings; City Of London; On-site; GBP 70,000 - 90,000; Full time

Job summary

Sterlings is seeking a Business Information Security Officer (BISO) to collaborate closely with the regional CISO on strategies and initiatives related to information security. The successful candidate will oversee security strategy and ensure compliance with regulatory requirements.

Key responsibilities include risk advisory, security training, and governance, as well as maintaining strong stakeholder connections with executives.

Applicants should have strong experience in information security within the financial services sector and relevant certifications.

Qualifications

• Experienced in information security, technology risk, or related disciplines within the financial services sector.
• A deep understanding of IT and Cyber Security.
• Cloud Security experience and a good understanding of privacy legislation (Data Protection Act 2018 / GDPR).

Responsibilities

• Support the strategy, initiatives, and roadmap for information security across the organization.
• Oversee security strategy and business execution.
• Partner closely with regional executives and global security functions.

Skills

Information security management

Stakeholder management

Cyber Security

Risk advisory

Governance

Education

Professional information security certifications (CISSP, CISM, CRISC)

Tools

SOX

COBIT

NIST

ISO standards

Cloud Security tools

Job description

THE BISO will work extremely closely with the regional CISO on supporting the strategy, initiatives and roadmap for information security across the organisation. This role is multi faceted, overseeing security strategy and business execution, ensuring that security, risk, and key objectives across compliance are implemented, measured, and governed correctly.

Key areas to note in which the BISO will be involved in include Risk Advisory and Control Adoption, Security Training and Awareness, Security Strategy and Planning, Governance, as well as Risk, Compliance and Audit co-ordination.

This role will involve strong stakeholder management skills, partnering closely with regional executives, technology leadership, and global security functions to embed a culture of security, drive control adoption, and maintain regulatory confidence.

EXPERIENCE

• Experienced in information security, technology risk, or related disciplines within financial services sector.
• A deep understanding of IT and Cyber Security.
• Experienced in IT security and control policy with specific experience of FFEIC, SOX, COBIT, NIST, CRI Profile and ISO standards.
• Experienced with the Defence in Depth approach
• Professional information security certifications (i.e. CISSP, CISM, CRISC or similar experience).
• Cloud Security experience and a good understanding of privacy legislation (Data Protection Act 2018 / GDPR).
• Demonstrates an understanding of strategic business and IT issues impacting the financial services market.