Business Information Security Officer

RSM UK; Greater London; Hybrid; GBP 90,000 - 120,000; Full time

Benefits offered by this job

Hybrid and Flexible working

26 Days Holiday (with the option of购买g

Lifestyle, Health, and Wellbeing incl.

Access to 300+ courses on demand

Job summary

RSM UK is seeking a seasoned Business Information Security Officer to embed cyber security within Lines of Business, acting as the conduit between business teams and central security. You will promote secure delivery of projects and services while aligning cyber and business strategy.

In this role you will manage the ISMS using ISO 27001 and Cyber Essentials Plus, partner with senior stakeholders, assess risks, and provide regular updates on threats and compliance to senior leadership.

Qualifications

• 5–10 years’ experience implementing, managing, and maintaining information security controls.
• Experience embedding cyber security into business services with operations teams.
• Experience collaborating with digital operations and application development teams to incorporate security across delivery lifecycles.
• Strong stakeholder management, communication, and interpersonal skills at senior and operational levels.
• Highly organised, analytical, and proactive team player with strong investigative skills.

Responsibilities

• Manage and maintain the ISMS, including development and upkeep of security policies, standards, procedures, and compliance with ISO 27001 and Cyber Essentials Plus.
• Partner with Lines of Business leadership and operational teams to align cyber and business requirements, embed security into operating models, and support projects, new initiatives, and technology solutions.
• Identify, assess, and manage cyber risks through risk assessments, internal audits, and ongoing evaluation of security controls and vulnerabilities.
• Act as the primary information security contact for the Lines of Business, providing guidance, coordinating with the central security team, and supporting client and supplier assurance activities.
• Monitor, report, and communicate security risks, compliance status, and emerging threats, providing regular updates to senior management and staying current with industry trends and innovations.

Skills

ISMS administration

ISO 27001

Cybersecurity governance

Stakeholder management

Security risk assessment

Job description

As one of the world's largest networks of audit, tax and consulting firms, RSM delivers big ideas and premium service to help middle-market businesses thrive. We are a fast-growing firm with big ambitions - we have a clear goal to become the premium adviser to the middle market, globally. This vision touches everything we do, motivating and inspiring us to become better every day. If you are looking for a firm where you can build a future and make an impact, then RSM is the place for you.

The Line of Business, Business Information Security Officer (BISO) supports the integration of cyber security practices within RSM’s Lines of Business. This role acts as a conduit between business teams and the central cyber security function, communicating and embedding security requirements, and ensuring secure delivery of projects and services.

Responsibilities include assessing and managing risks, ensuring compliance with relevant regulations and standards, aligning cyber strategy and Lines of Business strategy and promoting a culture of security integration and awareness.

This is an ideal role for someone experienced in cyber security, risk, and compliance who has experience working with senior stakeholders and delivering business-facing security work.

You will make an impact by

• Manage and maintain the Information Security Management System (ISMS), including development and upkeep of security policies, standards, procedures, and compliance with frameworks such as ISO 27001 and Cyber Essentials Plus.
• Partner with Lines of Business leadership and operational teams to align cyber and business requirements, embed security into operating models, and support projects, new initiatives, and technology solutions.
• Identify, assess, and manage cyber risks through risk assessments, internal audits, and ongoing evaluation of security controls and vulnerabilities.
• Act as the primary information security contact for the Lines of Business, providing guidance, coordinating with the central security team, and supporting client and supplier assurance activities.
• Monitor, report, and communicate security risks, compliance status, and emerging threats, providing regular updates to senior management and staying current with industry trends and innovations.

What we are looking for

• 5–10 years’ experience implementing, managing, and maintaining information security controls, including ISMS administration and maintaining ISO 27001 and Cyber Essentials+ certifications.
• Proven ability to embed cyber security into business services, working closely with operational teams to integrate controls into operating models and processes.
• Experience collaborating with digital operations and application development teams to incorporate security across delivery lifecycles and enable secure innovation.
• Strong stakeholder management, communication, and interpersonal skills, with the ability to influence, provide constructive feedback, and engage at both senior and operational levels.
• Highly organised, analytical, and proactive team player with strong investigative skills and a commitment to continuous personal and team development.

What we can offer you

We recognise that our people are our most important assets. That’s why we offer a flexible reward and benefits package that will help you have fulfilling experience, both in and out of work.

• Hybrid and Flexible working
• 26 Days Holiday (with the option of purchasing additional days)
• Lifestyle, Health, and Wellbeing including financial wellbeing benefits such as financial tools, electric car scheme and access to a virtual GP
• Access to a suite of 300+ courses on demand developed by our inhouse Talent Development team

Diversity and Inclusion at RSM

At RSM, we want to create a strong sense of belonging so that people of all identities, backgrounds, and cultures feel they can bring their true self to work. Our clients come from all walks of life. We aim to achieve that same diversity of background, experience and perspective in our own teams, so that we can genuinely understand our client's needs. Diverse teams bring a broader range of ideas and insights to work. That's why we're working together to ensure our firm's principles and processes support a firm culture that embraces difference and strengthens inclusion. At RSM we work hard to create an environment where our people can make a difference - to themselves, their career, their teams, and to the success of our firm and clients. We support all our people to work flexibly, to manage their family and other responsibilities alongside their work commitments; we believe this is key to achieving an inspiring and fulfilling working environment.