Business Information Security Officer

DTG Global; Greater London; Sur place; GBP 90 000 - 130 000; Plein temps

Résumé du poste

DTG Global seeks a Business Information Security Officer (BISO) to sit between the central security function and the business in the United Kingdom. You will own the ISMS, ensure ISO 27001 compliance, run risk assessments and audits, and report to senior management with clear, actionable insights.

You will work directly with delivery teams and support client and supplier assurance activities, ensuring security is embedded early in projects and scalable across services.

Qualifications

• Own and maintain the ISMS and related certifications (ISO 27001, Cyber Essentials Plus).
• Lead risk assessments and internal audits across the area.
• Report key information to senior management clearly and concisely.
• Collaborate with operational and delivery teams to embed security early in projects.

Responsabilités

• Act as the bridge between central security and the business.
• Support client and supplier assurance work for a client-facing firm.
• Engage with senior stakeholders and run security governance across delivery units.

Connaissances

ISMS

ISO 27001

Risk assessments

Audits

Stakeholder management

Client-facing

Formation

Bachelor’s degree in information security

Description du poste

A national professional services firm is looking for a Business Information Security Officer BISO to sit between its central security function and the business.

The role is the link between the two. You are who the business comes to when they want to launch something, change something, or answer a client's security questionnaire, and you are who the security function relies on to make sure its requirements work in practice.

You would own the ISMS and the certifications that go with it, ISO 27001 and Cyber Essentials Plus, run risk assessments and internal audits across your area, and report what matters to senior management clearly. Alongside that you would work directly with operational and delivery teams so security is built in early rather than added late, and support the client and supplier assurance work that comes with a client facing business.

It needs someone with five to ten years in security, risk or compliance, who has genuinely run an ISMS rather than kept one ticking over, and who can hold a room with senior stakeholders. Professional services or another client facing regulated environment will help.