Business Information Security Officer (BISO) for News UK

News Corp.; London; On-site; GBP 60,000 - 100,000; Full time

Job summary

An established industry player seeks a Business Information Security Officer to lead cybersecurity efforts in London. This role involves acting as a trusted advisor, developing strategies to enhance security posture, and ensuring compliance with policies and regulations. You'll collaborate with various teams to identify risks, implement solutions, and report on cybersecurity status. If you have a passion for cybersecurity and a wealth of experience, this position offers an exciting opportunity to make a significant impact in a dynamic and innovative environment.

Qualifications

• 10-15 years of experience in cybersecurity and compliance.
• Strong understanding of security frameworks and policies.

Responsibilities

• Act as primary cybersecurity advisor for the business unit.
• Develop and maintain understanding of business processes and risks.
• Lead development of cybersecurity strategy and ensure compliance.

Skills

Security Compliance

Policy Management

Security Frameworks (NIST, ISO27001, PCI)

Analytical Abilities

Communication Skills

Problem Solving

Critical Thinking

Education

Bachelor's degree in Technology

Bachelor's degree in Cybersecurity

Bachelor's degree in Computer Science/Engineering

Tools

Cloud Computing Environments

Job description

Equal Opportunity Employer

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, protected veteran status, or disability status. EEO/AA/M/F/Disabled/Vets

Job Description :

Business Information Security Officer, Cybersecurity Location: London

As a global media and information services company, News Corp understands the importance of cybersecurity and mitigating risk across the organization. We believe in protecting our businesses and customers and are looking to build innovative solutions that will allow us to become a global leader in cybersecurity. If cybersecurity is your passion and you want to be part of a cutting edge team, we want to hear from you!

The Business Information Security Officer (BISO) is the primary point of contact for News UK and supports the implementation of the Global Cybersecurity program within the business unit. As a trusted advisor, this individual will work with the business to understand business requirements and implement cybersecurity strategies, and will provide advice and oversight to the business to ensure the business is compliant with required cybersecurity requirements and policies. Combining business acumen with technical knowledge, this role assists in improving the security posture with respect to delivering services and partnering with News UK leadership. This role will understand the key assets and processes, identify and evaluate risks and controls, and suggest incremental controls or risk mitigation strategies where necessary. Additionally, the individual will drive and oversee business compliance with cybersecurity policy and standards while continuously monitoring and reporting on risks and documented exceptions.

Job Responsibilities:

1. Act as the primary business unit cybersecurity contact / advisor, liaising with global and local technology, legal, finance, audit, compliance, product leadership.
2. Develop and maintain in-depth understanding of business unit processes, crown jewels, physical locations, systems, technologies, data, customers, and business partners.
3. Lead the development of a News UK specific cybersecurity strategy, incorporating global cybersecurity strategies and initiatives, and understanding News UK business strategies and roadmaps to ensure cybersecurity is embedded at the right control points.
4. Coordinate and manage monthly Cyber Risk Steering Committee for News UK to ensure stakeholders are kept abreast of risks, threats, program maturity, and projects. Update and track actions and ownership as necessary.
5. Drive implementation of cybersecurity policies and standards across News UK. Proactively identify non-compliance and areas of potential improvement, and facilitate development and deployment of standard solutions.
6. Oversee PCI, SOX, and any other required legal and/or compliance requirements, support internal technology audits, as well as support Privacy on GDPR and other similar requirements.
7. Provide regular and timely reporting on the status of cybersecurity across News UK.
8. Engage with the Incident Response Team (IRT) and provide escalation path and contact point for security issues, incidents, and inquiries within News UK.
9. Work with the Cyber Defense, Product Security Engineering, Enterprise Security teams to assist in effectively driving program maturity across News UK.

Qualifications:

1. Minimum of 10-15 years of professional working experience.
2. A Bachelor's degree in Technology, Legal, Computer Science/Engineering, Cybersecurity, a related field or experience.
3. Must have a strong understanding of security compliance, policy management, security frameworks (NIST, ISO27001, PCI etc) and regulations.
4. Solid foundation of security architectures and cloud computing environments.
5. Excellent communication skills. Ability to effectively communicate, both orally and in writing, through all levels of the organization, but especially with executives.
6. Excellent problem solving, critical thinking, and analytical abilities.
7. International work experience or experience working as part of a globally dispersed team is a plus.
8. Comfortable working in matrixed organizations.
9. CISSP or CRISC certifications not required but highly referred.

About News Corp

News Corp is a global diversified media and information services company focused on creating and distributing authoritative and engaging content to consumers and businesses throughout the world. The company comprises businesses across a range of media, including: news and information.