Business Information Security Officer

Co-Op Company; Manchester; Hybrid; GBP 68,000 - 83,000; Full time

Benefits offered by this job

Private healthcare

Annual bonus

28 days holiday (rising to 32) + bank

Pension with up to 10% employer cont.

On-site gym access

30% discount on Co-op products

Cycle-to-work scheme

Virtual healthcare

Job summary

The Co-op in Manchester is seeking a Business Information Security Officer to embed security into strategy and product delivery. You’ll partner with senior leaders, translate risks into practical controls, and shape a culture where security is everyone’s responsibility.

This hybrid role requires two days a month in the office and offers a clear impact across our products and services. You’ll lead risk discussions, support audits, and champion secure-by-design practices while meeting regulatory

Qualifications

• Strong knowledge of cyber and information security principles and risk management practices.
• Ability to translate security requirements into practical business outcomes.
• Excellent communication of risks to non-technical audiences.
• Experience with governance, assurance, compliance, and incident management.
• Experience collaborating with cross-functional teams.

Responsibilities

• Act as a trusted business information security officer across Co-op, balancing risk with business objectives
• Translate priorities into practical security controls, assurance activities, and risk management plan
• Identify, assess, and communicate cyber risks to support informed decision-making
• Support compliance with security policies, standards, and regulations
• Embed secure-by-design principles into products and projects
• Partner with product, engineering, and operations to consider security from the start
• Support audits, assurance activities, and security reporting for senior colleagues
• Act as a key security contact during incidents and drive improvements

Skills

Cyber security

Risk management

Stakeholder communication

Governance

Job description

Business Information Security Officer
Up to £75,000 plus great benefits (Work Level 5)
Manchester City Centre | Hybrid (spending a minimum of two days a month in the office)

Looking for a role where information security is at the heart of everything you do? Enjoy tackling complex challenges and inspiring colleagues to stay secure? If that sounds like you, we’d love to hear from you!

We’re looking for a Business Information Security Officer (BISO) to join our Information Security team in Manchester. In this role, you’ll work closely with senior leaders, product teams, and other colleagues across Co-op to ensure security is at the heart of every decision made. Acting as a trusted advisor and partner, you’ll help translate complex information security risks and controls into clear, business-focussed outcomes that support innovation and transformation.

This is an opportunity to make a real impact, influencing decisions at all levels and helping to shape a culture where security is everyone’s responsibility.

Why this role matters

Information and cyber security are essential to maintaining the trust of our colleagues, customers, and member-owners. As a BISO, you’ll help make sure security is built into our products, services, and ways of working from the outset, rather than being added later as an afterthought.

By partnering with teams, identifying risks early, and providing clear, pragmatic guidance, you’ll enable informed decision-making and support the safe delivery of change across Co-op. Your work will help protect critical information, strengthen our resilience, and make sure we continue to meet our regulatory and security obligations while delivering better outcomes for everyone.

What you’ll do

• Act as a trusted business information security officer across Co-op, helping teams balance risk with business objectives
• Translate business priorities into practical security controls, assurance activities, and risk management activities driving an Information Security improvement plan
• Identify, assess, and communicate cyber and information security risks to support informed decision-making interpreting control frameworks such as NIST
• Support compliance with security policies, standards, and regulations
• Embed secure-by-design principles into products, services, and change projects
• Partner with product, engineering, and operational teams to make sure security is considered from the beginning
• Support audits, assurance activities, and security reporting for senior colleagues
• Act as a key security contact during incidents and help drive improvements based on lessons learned

What you’ll bring

We’re committed to making our roles as accessible as possible, so we only ask for the minimum criteria. To thrive here, you’ll need to bring:

• Strong knowledge of cyber and information security principles and risk management practices
• Experience translating technical security requirements into practical business outcomes
• The ability to communicate risks and recommendations clearly to non-technical audiences
• Experience working with business, technology, product, or operational teams
• Knowledge of secure-by-design approaches and embedding security into delivery processes
• An understanding of governance, assurance, compliance, and incident management activities
• Good relationship and partner management skills, with the ability to challenge constructively

We know some people may hesitate to apply if they don’t meet every requirement. At Co-op, we’re committed to building diverse and inclusive teams, so if you’re excited about this role but your experience doesn’t align perfectly, we still encourage you to apply.

We’re also open to applications from people who may require flexible working arrangements. There’ll be an opportunity to discuss your flexible working requirements during the interview process, and at offer stage.

Why Co-op?

At Co-op, we’re owned by our members. And because we’re owned by you, we can do right by you. So when you join us, you’re not just taking a job, you’re joining a movement. We’re an organisation that puts people and communities first, and we’re powered by purpose. We want this to be a place where you can thrive, so you’ll also receive:

• Private healthcare
• An annual bonus (based on personal and business performance)
• 28 days holiday (rising to 32 with service) plus bank holidays
• A pension with up to 10% employer contributions
• The opportunity to increase your earnings by joining our on-call rota
• Access to a subsidised onsite gym (at our Manchester HQ)
• 30% discount on Co-op products and 10% off other brands
• Stream – early access to a percentage of your pay as you earn it
• Virtual healthcare including GP appointments, mental health support, nutrition and fitness advice
• 24/5 colleague support service
• Training and support for your development and career progression
• Cycle-to-work scheme

A place you’ll belong

We’re building diverse teams that reflect the communities we serve. We welcome applications from everyone, and our support centre is an inclusive environment where all our colleagues can thrive.

If you have a disability, we’ll make reasonable adjustments to support you through the recruitment process. We’re also proud to be part of the Disability Confident scheme - if you’re disabled and you meet the minimum criteria for this job, we’ll guarantee you an interview.

Learn more about our recruitment process athttps://jobs.coop.co.uk/apply-process

Explore our commitments to diversity, inclusion and wellbeing athttps://jobs.coop.co.uk/diversity-inclusion-wellbeing