Cyber security - Business Information Security Officer

RELX Group plc; London; On-site; GBP 100,000 - 125,000; Full time

Job summary

An established industry player is seeking a Business Information Security Officer to enhance cybersecurity collaboration across business units. This pivotal role involves liaising with senior management and technical teams to ensure the security of enterprise assets. The ideal candidate will possess strong communication skills, a solid understanding of cloud security best practices, and the ability to implement effective security solutions. Join a forward-thinking organization that values innovation and is committed to creating a secure environment for its operations. If you are passionate about cybersecurity and ready to make a significant impact, this opportunity is for you.

Qualifications

• Strong collaboration and communication skills are essential.
• Experience in cloud security and compliance initiatives is crucial.

Responsibilities

• Act as a liaison between business units and the security program.
• Lead the implementation of security solutions and tools.
• Develop and report metrics for security policy compliance.

Skills

Collaboration with technical functions

Cloud and network infrastructure security best practices

Security controls for end-user devices

Microsoft 365 security implementations

DevOps principles and practices

Communication and customer service skills

Navigating complex organizations

Compliance and governance initiatives

Project planning and time management

Problem-solving and data analytics

Job description

About the Company:
Elsevier is a global information analytics business that helps institutions and professionals advance healthcare, open science, and improve performance for the benefit of humanity. They provide digital solutions and tools in the areas of strategic research management, R&D performance, clinical decision support, and professional education.

About the role:
The Business Information Security Officer (BISO) will work closely with senior management, third parties, project managers, and business subject matter experts (SMEs). The BISO is a liaison between cybersecurity and their aligned business unit. The BISO ensures the enterprise's assets are secure, its business requirements are received and understood by the cybersecurity division, and that the business understands cybersecurity risks.

Key Responsibilities:

1. Provide a critical liaison role between the business unit and the security program, enhancing collaboration, communication, and alignment of goals.
2. Serve as a trusted advisor with business unit leadership, fostering strong relationships with squads and BU teams.
3. Build relevant relationships with business units and tech squads to deliver security-by-design controls in projects, architecture, infrastructure, and applications.
4. Support the CISO, Security management team, and Executive Leadership, even during challenging times.
5. Be actively engaged and informed in projects across the business unit, ensuring visibility and security alignment.
6. Act as an ambassador for security-wide workstreams, aligning business units with the enterprise-wide security program.
7. Lead the implementation of security solutions, tools, and monitoring to mitigate cybersecurity risks.
8. Work closely with security leadership to instill cybersecurity policies and practices throughout business units.
9. Define the information and infrastructure security needs of the BU's using a risk-based approach.
10. Develop and report BU metric scorecards to reflect the level of adoption and compliance to security policies/standards.

Skills required:

1. Ability to collaborate with multiple technical functions in security, infrastructure, technical operations, training, software engineering, and customer support.
2. Strong awareness of cloud and network infrastructure security best practices.
3. Comprehensive understanding of security controls for end-user devices and Microsoft 365 security implementations.
4. Knowledge of key DevOps principles and practices.
5. Strong communication and customer service skills.
6. Organizationally savvy and able to navigate complex organizations.
7. Strong understanding of compliance and governance initiatives.
8. Strong project planning, time management, and change management skills.
9. Strong problem-solving experience and data analytics skills.
10. Ability to develop and implement security programs.

Elsevier is an equal opportunity employer: qualified applicants are considered for and treated during employment without regard to race, color, creed, religion, sex, national origin, citizenship status, disability status, protected veteran status, age, marital status, sexual orientation, gender identity, genetic information, or any other characteristic protected by law. We are committed to providing a fair and accessible hiring process. If you have a disability or other need that requires accommodation or adjustment, please let us know by completing our Applicant Request Support Form: here, or please contact 1-855-833-5120.

Please read our Candidate Privacy Policy.