Business Information Security Officer

JR United Kingdom; London; On-site; GBP 50,000 - 80,000; Full time

Job summary

A leading organisation in the Retail/FMCG sector is seeking a skilled Business Information Security Officer (BISO) in London. This role involves bridging business functions and cybersecurity, ensuring security policies are implemented, and driving improvements in risk management. Ideal candidates will have strong expertise in information security and IT risk management, along with excellent communication skills to influence senior stakeholders.

Qualifications

• Proven experience in Information Security and IT Risk Management.
• Strong background in Governance, Risk, and Compliance (GRC).
• Exceptional communication and influencing skills.

Responsibilities

• Act as the primary liaison between business units and the cybersecurity function.
• Lead the implementation of information security policies and training.
• Identify, assess, and escalate risk and control issues.

Skills

Information Security

IT Risk Management

Governance, Risk, and Compliance

Stakeholder Management

Communication

Strategic Thinking

Education

CISA

CISSP

ISO 27001 Familiarity

Tools

Data Loss Prevention (DLP) solutions

Job description

Social network you want to login/join with:

Business Information Security Officer, London

col-narrow-left

Client:

InterQuest Group

Location:

London, United Kingdom

Job Category:

Other

-

EU work permit required:

Yes

col-narrow-right

Job Views:

2

Posted:

23.05.2025

Expiry Date:

07.07.2025

col-wide

Job Description:

Business Information Security Officer (BISO)

Contract Type: 3-Month Contract

Overview:

A leading organisation in the Retail/FMCG sector is seeking a skilled and motivated Business Information Security Officer (BISO) to support ongoing transformation efforts. This is an excellent opportunity for a professional with strong expertise in Technology, Risk, and Security to play a pivotal role in bridging the gap between business functions and cybersecurity.

As the BISO, you’ll ensure that security policies, training, and awareness initiatives are embedded across the organisation. You’ll work closely with stakeholders across Data, Information Security, IT Operations, and Portfolio teams, driving improvements to control frameworks and risk postures. The role requires strong influence and communication skills, particularly with IT leadership and executive teams, to secure necessary funding and support for mitigating control gaps and managing risk priorities effectively.

Key Responsibilities:

• Act as the primary liaison between business units and the cybersecurity function
• Drive alignment between business strategies and cybersecurity priorities
• Lead the implementation of information security policies, training, and awareness programmes
• Coordinate control improvements across various technical and operational domains
• Identify, assess, and escalate risk and control issues
• Influence senior stakeholders and secure buy-in at the executive level

Key Skills & Experience:

• Proven experience in Information Security and IT Risk Management
• In-depth knowledge of information security principles and frameworks
• Strong background in Governance, Risk, and Compliance (GRC)
• Internal audit evaluation and risk-based assurance planning skills
• Strategic thinker with strong technical insight
• Experienced in stakeholder management up to board level
• Exceptional communication and influencing skills
• Demonstrated ability to develop and implement strategic security plans
• Competent in assessing business processes and IT technologies for risk exposure
• Familiarity with security controls assessment tools and methodologies

Tools & Technologies:

• Experience with Data Loss Prevention (DLP) solutions

Certifications (Desirable):

• CISA
• CISSP
• Familiarity with ISO standards, especially ISO 27001