Hybrid BISO — Aligning Cyber with Business

RSM UK; Greater London; Hybrid; GBP 90,000 - 120,000; Full time

Benefits offered by this job

Hybrid and Flexible working

26 Days Holiday (with the option of购买g

Lifestyle, Health, and Wellbeing incl.

Access to 300+ courses on demand

Job summary

RSM UK is seeking a seasoned Business Information Security Officer to embed cyber security within Lines of Business, acting as the conduit between business teams and central security. You will promote secure delivery of projects and services while aligning cyber and business strategy.

In this role you will manage the ISMS using ISO 27001 and Cyber Essentials Plus, partner with senior stakeholders, assess risks, and provide regular updates on threats and compliance to senior leadership.

Qualifications

• 5–10 years’ experience implementing, managing, and maintaining information security controls.
• Experience embedding cyber security into business services with operations teams.
• Experience collaborating with digital operations and application development teams to incorporate security across delivery lifecycles.
• Strong stakeholder management, communication, and interpersonal skills at senior and operational levels.
• Highly organised, analytical, and proactive team player with strong investigative skills.

Responsibilities

• Manage and maintain the ISMS, including development and upkeep of security policies, standards, procedures, and compliance with ISO 27001 and Cyber Essentials Plus.
• Partner with Lines of Business leadership and operational teams to align cyber and business requirements, embed security into operating models, and support projects, new initiatives, and technology solutions.
• Identify, assess, and manage cyber risks through risk assessments, internal audits, and ongoing evaluation of security controls and vulnerabilities.
• Act as the primary information security contact for the Lines of Business, providing guidance, coordinating with the central security team, and supporting client and supplier assurance activities.
• Monitor, report, and communicate security risks, compliance status, and emerging threats, providing regular updates to senior management and staying current with industry trends and innovations.

Skills

ISMS administration

ISO 27001

Cybersecurity governance

Stakeholder management

Security risk assessment

Job description

RSM UK is seeking a seasoned Business Information Security Officer to embed cyber security within Lines of Business, acting as the conduit between business teams and central security. You will promote secure delivery of projects and services while aligning cyber and business strategy.

In this role you will manage the ISMS using ISO 27001 and Cyber Essentials Plus, partner with senior stakeholders, assess risks, and provide regular updates on threats and compliance to senior leadership.