Business Information Security Officer (BISO)

Alvarez & Marsal; London; On-site; GBP 60,000 - 90,000; Full time

Job summary

Join a leading global consulting firm as a Business Information Security Officer in London. In this role, you'll support critical enterprise security initiatives, engage with key stakeholders, and instill cybersecurity best practices across business units. The position offers opportunities for personal and professional development alongside a collaborative, performance-driven culture.

Qualifications

• Strong written and verbal communication skills required.
• High integrity and professionalism are essential.
• Extensive experience in cybersecurity and/or IT expected.

Responsibilities

• Integrate cybersecurity practices into business unit initiatives.
• Provide reporting on information security initiatives.
• Advise business units on security recommendations and policies.

Skills

Communication

Integrity

Project Management

Cybersecurity Solutions

Education

Bachelor's degree in information security

CISSP Certification

CISM Certification

CRISC Certification

CISA Certification

Job description

Description

About Alvarez & Marsal

Alvarez & Marsal (A&M) is a global consulting firm with over 10,000 entrepreneurial, action and results-oriented professionals in over 40 countries. We take a hands-on approach to solving our clients' problems and assisting them in reaching their potential. Our culture celebrates independent thinkers and doers who positively impact our clients and shape our industry. The collaborative environment and engaging work-guided by A&M's core values of Integrity, Quality, Objectivity, Fun, Personal Reward, and Inclusive Diversity-are why our people love working at A&M.

The Team

With the growth of the business globally, we are expanding our Global Security Office (GSO) and are looking to recruit a Business Information Security Officer (BISO) to join the team in London. Reporting to the Chief Security Officer, the BISO will play a critical role in providing leadership, executive support, and strategic and tactical guidance for the information security program supporting enterprise security initiatives. This role requires a strong technical background, excellent communication skills, and the ability to work closely with key stakeholders such as senior management, third parties, and business subject matter experts (SMEs).

How you will contribute

• Act as a trusted liaison to ensure cybersecurity practices are integrated into business unit initiatives throughout their lifecycle.
• Work closely with security leadership to instil information security policies and practices across business units, addressing security awareness, incident response, application security, and infrastructure.
• Partner with business units to track, assess and report information security requirements and initiatives back to security leadership.
• Be "part of the business unit" team and act in a consultative way to help business improve its security posture and adhere to security policies and expected controls
• Provide regular, timely reporting on information security initiative status across supported business units
• Foster strong relationships with internal business units and provide motivation to adopt information security controls.
• Advise business units on enterprise-wide people, process, and technology security recommendations.
• Stay informed on security threats, vulnerabilities, and mitigations, and circulate this knowledge across business units.
• Build relationships to deliver security-by-design controls incorporated into projects, architecture, infrastructure, and applications.
• Stay abreast of new laws, regulations, and standards, assessing their impact on the business.
• Verify that security content training initiatives and internal/external communication are conducted regularly.
• Support the CSO, management team, and executive leadership through strategic and operational security initiatives.
• Serve as a trusted business executive focal for all things Global Security

Qualifications

• Strong written and verbal communication skills across all levels of the organization.
• High level of integrity, trustworthiness, and professionalism.
• Ability to understand business focus and processes and inject information security into the business through teamwork and influence.
• Strong project management, multitasking, and organizational skills.
• Applicable knowledge of national and global information security policies, regulations, and security frameworks.
• Demonstrated understanding of a wide range of cybersecurity solutions.
• Extensive experience in cybersecurity and/or information technology.
• Preferable certifications: CISSP, CISM, CRISC, CISA.
• Bachelor's degree in information security, business administration, information assurance, or a related technical field.

Your journey at A&M

We recognize that our people are the driving force behind our success, which is why we prioritize an employee experience that fosters each person's unique professional and personal development. Our robust performance development process promotes continuous learning, rewards your contributions, and fosters a culture of meritocracy. With top-notch training and on-the-job learning opportunities, you can acquire new skills and advance your career.

We prioritize your well-being, providing benefits and resources to support you on your personal journey. Our people consistently highlight the growth opportunities, our unique, entrepreneurial culture, and the fun we have together as their favorite aspects of working at A&M. The possibilities are endless for high-performing and passionate professionals.

To learn more, visit: alvarezandmarsal.com