Business Information Security Officer

Elsevier; City Of London; On-site; GBP 70,000 - 90,000; Full time

Job summary

A global leader in information and analytics seeks a BISO to oversee security initiatives in London. The successful candidate will lead risk management and cybersecurity governance. Key responsibilities include driving cyber awareness across the organization, managing risk assessments, and liaising with technical teams. Ideal candidates should have extensive experience as a BISO and expertise in incident response and risk management, with a strong understanding of compliance frameworks such as ISO27001. The role offers a competitive salary and comprehensive benefits.

Benefits

Generous holiday allowance

Health screening and medical benefits

Wellbeing programs

Life assurance

Competitive contributory pension scheme

Employee discounts via Perks at Work

Qualifications

• Experience as a BISO for several years.
• Strong collaboration and communication skills.
• Expertise in Cyber Security, incident response, and risk management.
• Understanding of Information Security compliance frameworks like ISO27001.
• Experience in problem-solving and leading teams.

Responsibilities

• Drive cybersecurity awareness and governance across the organization.
• Act as a liaison between business units and Cyber Security organization.
• Manage technical risk assessments and oversight of security projects.
• Define information security strategy with a risk-based approach.
• Develop cyber security metric scorecards to track compliance and adoption.

Skills

Collaboration skills

Communication skills

Incident response

Risk management

Governance knowledge

Job description

About our Team

Do you want to create strategies and chart a course for our Cyber progress? Are you interested in evangelizing our core information security tools and risk management solutions?

About the Role

As a BISO for our A&G or TIO markets, you will be responsible for planning, organizing, and executing enterprise-wide information and security initiatives. You will deliver long-term improvements and benefits impacting our organizational goals focusing on risk management and cybersecurity defences.

Responsibilities

• Driving information, cyber and infrastructure security awareness and governance deep into the organization. This will involve aligning Business & Technology units with enterprise cybersecurity programs and objectives
• Providing a critical liaison role between the business unit and the Elsevier Cyber Security organization. This includes enhancing the level of collaboration and effective communications with key stakeholders/business units.
• Managing the oversight of technical risk assessments, such as vulnerability scanning, penetration testing, risk reviews for new applications, and third-party risk assessments. Leading, monitoring and managing security projects; provide expert guidance on security matters for other IT projects.
• Defining the information and infrastructure security utilizing a risk-based approach. Develop goals, training recommendations, strategies, plans, and success criteria needed to achieve the vision
• Developing and report cyber security metric scorecards to reflect the level of adoption and compliance to security policies/standards. Tasked with the remediation of vulnerabilities, and residual risks.
• Managing the oversight of technical risk assessments, such as vulnerability scanning, penetration testing, risk reviews for new applications. Leading, monitoring and managing security projects; provide expert guidance on security matters for other IT projects
• Providing leadership and direction for the integration of security strategy and architecture with business and IT strategy. Evaluate and design the implementation of new or updated information security hardware or software. Analyse its impact on the existing environment.

Requirements

• You will have experience as a BISO for several years.
• As a BISO, you can show strong collaboration and communication skills with technical teams like security, infrastructure, operations, and software engineering.
• You will have expertise in Cyber Security, including incident response, risk management, and governance, by developing innovative strategies and security programs.
• Demonstrate extensive understanding of Information Security compliance and governance frameworks such as ISO27001.
• You will have extensive experience in problem-solving involving leading teams in identifying, researching, and coordinating the resources necessary to effectively.

Working for you

We promote a healthy work/life balance across the organisation. With numerous wellbeing initiatives, shared parental leave, study assistance and sabbaticals, we will help you meet your immediate responsibilities and your long-term goals.

Benefits

• Generous holiday allowance with the option to buy additional days
• Health screening, eye care vouchers and private medical benefits
• Wellbeing programs
• Life assurance
• Access to a competitive contributory pension scheme
• Save As You Earn share option scheme
• Travel Season ticket loan
• Electric Vehicle Scheme
• Optional Dental Insurance
• Maternity, paternity and shared parental leave
• Employee Assistance Programme
• Access to emergency care for both the elderly and children
• RECARES days, giving you time to support the charities and causes that matter to you
• Access to employee resource groups with dedicated time to volunteer
• Access to extensive learning and development resources
• Access to employee discounts scheme via Perks at Work

About the business

A global leader in information and analytics, we help researchers and healthcare professionals advance science and improve health outcomes for the benefit of society. Building on our publishing heritage, we combine quality information and vast data sets with analytics to support visionary science and research, health education and interactive learning, as well as exceptional healthcare and clinical practice. What you do every day will help advance science and healthcare to advance human progress.

We are committed to providing a fair and accessible hiring process. If you have a disability or other need that requires accommodation or adjustment, please let us know by completing our Applicant Request Support Form or please contact 1-855-833-5120.

Criminals may pose as recruiters asking for money or personal information. We never request money or banking details from job applicants. Learn more about spotting and avoiding scams here.

Please read our Candidate Privacy Policy.

We are an equal opportunity employer: qualified applicants are considered for and treated during employment without regard to race, color, creed, religion, sex, national origin, citizenship status, disability status, protected veteran status, age, marital status, sexual orientation, gender identity, genetic information, or any other characteristic protected by law.

USA Job Seekers: EEON Know Your Rights.