BISO: Security Strategy & Risk Leader (Hybrid)

RSM UK; Greater London; Hybrid; GBP 70,000 - 110,000; Full time

Benefits offered by this job

Hybrid work

Holiday allowance

Wellbeing benefits

Courses on demand

Job summary

RSM UK is seeking a cybersecurity professional for the Line of Business, Business Information Security Officer (BISO) role. You will bridge business teams and central security, embedding security requirements and ensuring secure delivery of projects and services across the firm.

The ideal candidate has 5–10 years’ experience in information security, risk and compliance, with a track record of working with senior stakeholders and implementing ISMS frameworks such as ISO 27001 and Cyber Essentials

Qualifications

• 5–10 years’ experience implementing, managing, and maintaining information security controls, including ISMS administration and ISO 27001 / Cyber Essentials+.
• Proven ability to embed cyber security into business services with operations teams.
• Experience collaborating with digital operations and application development to secure delivery lifecycles.
• Strong communication and interpersonal skills at senior and operational levels.
• Organised, analytical, proactive team player focused on continual development.

Responsibilities

• Manage and maintain ISMS across Lines of Business, developing and updating security policies, standards, and procedures.
• Partner with leadership to align cyber and business requirements and support projects and new initiatives.
• Identify, assess, and manage cyber risks via risk assessments and audits.
• Act as primary information security contact for Lines of Business, coordinating with central security.
• Monitor and report security risks and compliance status to senior management.

Skills

ISMS administration

Cyber security governance

Stakeholder management

Regulatory compliance

Security risk assessment

Job description

RSM UK is seeking a cybersecurity professional for the Line of Business, Business Information Security Officer (BISO) role. You will bridge business teams and central security, embedding security requirements and ensuring secure delivery of projects and services across the firm.

The ideal candidate has 5–10 years’ experience in information security, risk and compliance, with a track record of working with senior stakeholders and implementing ISMS frameworks such as ISO 27001 and Cyber Essentials