Business Information Security Officer, Europe

TN United Kingdom; London; On-site; GBP 60,000 - 100,000; Full time

Job summary

An established industry player is seeking a Business Information Security Officer to bridge central cybersecurity functions with regional teams in London. This pivotal role involves advising on cybersecurity risks, particularly in AI, and fostering a culture of security awareness across the organization. With a focus on collaboration, you will engage with various stakeholders, ensuring adherence to regulatory requirements and implementing effective risk management strategies. If you're passionate about cybersecurity and eager to make an impact in a dynamic environment, this opportunity is for you.

Qualifications

• 6+ years of experience in cybersecurity and IT risk management.
• Experience with cybersecurity principles and risk management frameworks.
• Familiarity with AI security and governance frameworks.

Responsibilities

• Advise regional management on cybersecurity risk levels and posture.
• Collaborate with regional leaders as a trusted advisor on cybersecurity.
• Support implementation of regional third-party risk management activities.

Skills

Cybersecurity

Risk Management

AI Security

PCI Compliance

Data Loss Prevention

Education

Bachelor's degree in Information Security

Bachelor's degree in Computer Science

Bachelor's degree in Engineering

Tools

NIST CSF

CIS

GDPR

Job description

Social network you want to login/join with:

Business Information Security Officer, Europe, London

col-narrow-left

Client:

Location:

London, United Kingdom

Job Category:

Other

-

EU work permit required:

Yes

col-narrow-right

Job Reference:

01c645f8e143

Job Views:

7

Posted:

05.05.2025

Expiry Date:

19.06.2025

col-wide

Job Description:

JOB DESCRIPTION

ABOUT THE JOB

We’re looking for a Business Information Security Officer (BISO), Europe to join our team in London, reporting to the Senior Manager, Business Information Security Office and Strategy.

As the BISO for Europe, you’ll play a key role as the bridge between our central cybersecurity function and the regional business teams. You’ll work closely with regional leadership to understand business goals, embed cybersecurity—including AI-related risks—into operational strategies, and drive alignment between business and security objectives. You’ll also lead efforts to identify and assess risks, advise on mitigation approaches, and foster a strong culture of security awareness across the region.

KEY RESPONSIBILITIES

Business Partnership & Advisory:

• Collaborate with regional business leaders and managers to serve as a trusted advisor on cybersecurity matters, including new areas like AI security.
• Develop an understanding of regional team goals and processes to communicate cyber risks in e-commerce, retail, and wholesale business teams.
• Advise regional management on cybersecurity risk levels, posture, and the potential impact of threats.
• Support regional leadership by contributing to the cost-benefit analysis of information security programs.
• Partner with Privacy team and legal counsel on due diligence and data-related functions.
• Support the implementation and management of regional third-party risk management activities, including performing third-party risk assessments.
• Experience with PCI compliance. Manage, lead, and conduct PCI assessments for different countries, collaborating with app owners and payment gateways.
• Help build the regional data loss prevention (DLP) program components and understand the business impact.
• Advise on the implementation of corporate AI governance and security posture management for AI systems within the region.
• Ensure regional adherence to risk remediation protocols, tracking mitigation efforts and exceptions according to established frameworks and standards (e.g., NIST CSF, CIS).

Communication & Culture:

• Engage constructively with partners regarding cybersecurity issues and requirements. Maintain relationships with respective points of contact.
• Understand different cultures in the European regions and stay updated on changing regulatory requirements.
• Educate regional partners on cybersecurity-related matters, including data and operational risks, to increase awareness and foster a security-conscious culture.
• Participate in relevant cybersecurity and business councils or working groups.
• Facilitate communication between regional departments and central cybersecurity teams.

ABOUT YOU

• Bachelor’s degree in Information Security, Computer Science, Engineering, or a related field.
• Experience engaging with and influencing management levels regarding business-specific Information Security Risk briefing and reporting.
• Experience operating within the European regulatory landscape (e.g., GDPR).
• 6+ years of experience in cybersecurity, network/application security, IT risk management, or similar roles, with demonstrated business partnering experience.
• Knowledge of cybersecurity principles, risk management frameworks (e.g., NIST CSF, CIS v8, PCI), and security technologies.
• Familiarity with AI concepts, AI-specific security risks, and AI governance frameworks (e.g., NIST AI RMF, EU AI Act principles). Experience with AI security posture management.