Business Information Security Officer

NTT DATA, Inc.; Birmingham; Hybrid; GBP 80,000 - 110,000; Full time

Job summary

NTT DATA, Inc. is seeking a Business Information Security Officer (BISO) to act as the primary business-facing security lead, operating in a hybrid model in London or Birmingham.

The role ensures security requirements align with business objectives and service delivery, advising stakeholders on risk and governance across the service lifecycle. You will lead security governance, drive continuous improvement, and coordinate across security functions, technology teams and business stakeholders to

Qualifications

• Minimum 5 years' experience within information security, governance, risk, assurance or business information security.
• Experience in complex enterprise or managed service environments.
• Experience working with senior business, operational and technology stakeholders.
• Experience supporting governance, audit and assurance activities.
• Experience translating security requirements into practical operational outcomes.
• Experience coordinating cross-functional activities involving multiple stakeholders.

Responsibilities

• Act as the primary business-facing security representative for assigned services.
• Build trusted relationships with business, technology and service stakeholders.
• Translate security requirements into practical operational outcomes and ensure alignment.
• Promote integration of security within service management processes and delivery practices.
• Support governance, audit and assurance activities and drive remediation.
• Facilitate stakeholder engagement and security reporting across the service lifecycle.
• Lead continual security improvement and resilience initiatives.

Skills

Security governance

Risk management

Stakeholder engagement

Information security

Audit & assurance

Business relationships

Job description

Business Information Security Officer (BISO)

Hybrid variable - London or Birmingham

Role Purpose

The Business Information Security Officer (BISO) acts as the primary business-facing security lead, working under the direction of the Account Security Director (vCISO).

The role ensures that business objectives, security requirements and service delivery activities remain aligned. Acting as a trusted advisor to business and operational stakeholders, the BISO promotes the effective integration of security requirements into service delivery, operational processes and business change activities.

Working closely with service teams and specialist security functions, the BISO supports the implementation of security governance arrangements, facilitates stakeholder engagement and helps drive continual improvement in security maturity, operational resilience and control effectiveness.

The role provides leadership, guidance and coordination across business and service stakeholders, helping ensure security considerations are understood, embedded and effectively managed throughout the service lifecycle.

What you'll be doing;

Business Security Leadership

• Act as the primary business-facing security representative for assigned services.
• Build and maintain trusted relationships with business, technology and service stakeholders.
• Promote understanding of security responsibilities, obligations and control ownership.
• Support stakeholders in balancing business objectives, operational priorities and security requirements.
• Facilitate effective collaboration between stakeholders and security functions.

Security Requirements & Service Alignment

• Support the translation of business, contractual, regulatory and security requirements into operational activities.
• Promote the integration of security requirements within service management processes and delivery practices.
• Ensure security requirements remain understood and appropriately embedded throughout the service lifecycle.
• Support assessment of the business impact arising from security risks, issues and significant service changes.
• Facilitate engagement with specialist security functions where additional expertise is required.

Governance, Assurance & Improvement Support

• Support operation of the Security Management Plan and associated governance activities.
• Coordinate stakeholder participation in security governance, audit and assurance activities.
• Support the tracking and reporting of security actions, findings and improvement initiatives.
• Promote accountability for remediation activities and control improvements.
• Contribute to the continual improvement of governance and assurance practices.

Stakeholder Engagement & Communication

• Facilitate communication between business stakeholders, delivery teams and security functions.
• Support the development and communication of security reporting and management information.
• Promote awareness of security priorities, obligations and initiatives.
• Support governance forums through stakeholder coordination and action management.

Security Culture & Continuous Improvement

• Champion positive security behaviours and shared responsibility for security.
• Support security awareness and engagement initiatives.
• Coordinate Security Champion activities where established.
• Encourage identification of improvement opportunities and lessons learned.
• Support delivery of agreed security improvement initiatives.

Key Interfaces

• Account Security Director (CISO)
• Business Stakeholders
• Technology Stakeholders
• Service Owners
• Service Delivery Managers
• Information Security Managers
• Security Architects
• Security Operations Teams
• Risk and Compliance Functions
• Operational Resilience Functions
• Audit Functions
• Security Champions
• Third-Party Suppliers and Partners

What you'll bring;

• Minimum 5 years' experience within information security, security governance, risk, assurance, compliance or business information security roles.
• Experience operating within complex enterprise or managed service environments.
• Experience working with senior business, operational and technology stakeholders.
• Experience supporting governance, audit and assurance activities.
• Experience translating security requirements into practical operational outcomes.
• Experience coordinating cross-functional activities involving multiple stakeholders.

Knowledge & Skills

• Security governance and risk management principles.
• Security assurance and control management practices.
• Service management and operational delivery processes.
• Business relationship management and stakeholder engagement.
• Security reporting, management information and performance metrics.
• Operational resilience and business continuity principles.
• Regulatory, contractual and policy compliance requirements.
• Communication, negotiation and influencing skills.
• Ability to communicate complex security matters in business terms.
• Strong organisational, coordination and problem‑solving capabilities.

Qualifications & Professional Membership

• CISSP, CISM, CRISC, ISO/IEC 27001 or equivalent recognised security qualification.
• Professional registration or accreditation desirable.
• Membership of a recognised professional body.
• Evidence of continuing professional development.