BISO: Strategy & Security for Business Ops

RSM UK Group LLP; Greater London; Hybrid; GBP 75,000 - 110,000; Full time

Benefits offered by this job

Hybrid working

26 days holiday

Wellbeing & financial tools

300+ courses on demand

Job summary

RSM UK Group LLP is seeking a Line of Business Information Security Officer to weave cyber security into business services across our London-area operations. With 5–10 years of hands-on experience, you will manage ISMS, oversee ISO 27001 and Cyber Essentials Plus, and partner with senior leaders to embed secure delivery into projects and services.

You will assess risks, conduct internal audits, and maintain security policies, standards and procedures while communicating findings to executives

Qualifications

• 5–10 years' experience implementing, managing, and maintaining information security controls.
• Proven ability to embed cyber security into business services, working with operational teams.
• Experience collaborating with development teams to embed security across delivery lifecycles.
• Strong stakeholder management and communication skills, with the ability to influence at senior and operational levels.

Responsibilities

• Manage and maintain the ISMS, including development and upkeep of security policies, standards, procedures, and compliance with ISO 27001 and Cyber Essentials Plus.
• Partner with Lines of Business leadership to align cyber and business requirements and embed security into operating models.
• Identify, assess, and manage cyber risks through risk assessments and audits; monitor vulnerabilities and controls.
• Act as the primary information security contact for the Lines of Business, coordinating with central security and supporting assurance activities.
• Monitor, report, and communicate security risks and compliance status to senior management.

Skills

ISMS administration

ISO 27001

Cyber Essentials+

Risk assessments

Stakeholder management

Security policy

Security governance

Job description

RSM UK Group LLP is seeking a Line of Business Information Security Officer to weave cyber security into business services across our London-area operations. With 5–10 years of hands-on experience, you will manage ISMS, oversee ISO 27001 and Cyber Essentials Plus, and partner with senior leaders to embed secure delivery into projects and services.

You will assess risks, conduct internal audits, and maintain security policies, standards and procedures while communicating findings to executives