Cyber security - Business Information Security Officer

RELX; London; On-site; GBP 100,000 - 125,000; Full time

Job summary

An established industry player is seeking a Business Information Security Officer to serve as a vital link between cybersecurity and business units. This role involves fostering collaboration, ensuring security alignment, and implementing effective security solutions. The ideal candidate will possess strong communication skills, a solid understanding of cloud and network security, and the ability to navigate complex organizations. Join a forward-thinking company committed to advancing security practices that protect its assets and support its mission of improving performance for the benefit of humanity.

Qualifications

• Strong understanding of cybersecurity risks and security solutions.
• Ability to develop and implement security programs effectively.

Responsibilities

• Act as a liaison between business units and cybersecurity, enhancing collaboration.
• Lead the implementation of security solutions and tools to mitigate risks.

Skills

Collaboration with technical functions

Cloud and network infrastructure security

Security controls for end-user devices

Microsoft 365 security implementations

DevOps principles and practices

Communication skills

Customer service skills

Compliance and governance initiatives

Project planning and time management

Problem-solving and data analytics

Job description

About the Company:

Elsevier is a global information analytics business that helps institutions and professionals advance healthcare, open science, and improve performance for the benefit of humanity. They provide digital solutions and tools in the areas of strategic research management, R&D performance, clinical decision support, and professional education.

About the role:

The Business Information Security Officer (BISO) will work closely with senior management, third parties, project managers, and business subject matter experts (SMEs). The BISO is a liaison between cybersecurity and their aligned business unit. The BISO ensures the enterprise's assets are secure, its business requirements are received and understood by the cybersecurity division, and that the business understands cybersecurity risks.

Key Responsibilities:

1. Provide a critical liaison role between the business unit and the security program, enhancing collaboration, communication, and alignment of goals.
2. Serve as a trusted advisor with business unit leadership, fostering strong relationships with squads and BU teams.
3. Build relevant relationships with business units and tech squads to deliver security-by-design controls in projects, architecture, infrastructure, and applications.
4. Support the CISO, Security management team, and Executive Leadership, even during challenging times.
5. Be actively engaged and informed in projects across the business unit, ensuring visibility and security alignment.
6. Act as an ambassador for security-wide workstreams, aligning business units with the enterprise-wide security program.
7. Lead the implementation of security solutions, tools, and monitoring to mitigate cybersecurity risks.
8. Work closely with security leadership to instill cybersecurity policies and practices throughout business units.
9. Define the information and infrastructure security needs of the BU's using a risk-based approach.
10. Develop and report BU metric scorecards to reflect the level of adoption and compliance to security policies/standards.

Skills required:

1. Ability to collaborate with multiple technical functions in security, infrastructure, technical operations, training, software engineering, and customer support.
2. Strong awareness of cloud and network infrastructure security best practices.
3. Comprehensive understanding of security controls for end-user devices and Microsoft 365 security implementations.
4. Knowledge of key DevOps principles and practices.
5. Strong communication and customer service skills.
6. Organizationally savvy and able to navigate complex organizations.
7. Strong understanding of compliance and governance initiatives.
8. Strong project planning, time management, and change management skills.
9. Strong problem-solving experience and data analytics skills.
10. Ability to develop and implement security programs.