Hybrid BISO: Secure-by-Design Partner to Growth

Co-op; Manchester; Hybrid; GBP 68,000 - 83,000; Full time

Benefits offered by this job

Private healthcare

Annual bonus

28 days holiday (rising to 32) + bank

Pension with up to 10% employer cont.

On-site gym access

30% discount on Co-op products

Cycle-to-work scheme

Virtual healthcare

Job summary

The Co-op in Manchester is seeking a Business Information Security Officer to embed security into strategy and product delivery. You’ll partner with senior leaders, translate risks into practical controls, and shape a culture where security is everyone’s responsibility.

This hybrid role requires two days a month in the office and offers a clear impact across our products and services. You’ll lead risk discussions, support audits, and champion secure-by-design practices while meeting regulatory

Qualifications

• Strong knowledge of cyber and information security principles and risk management practices.
• Ability to translate security requirements into practical business outcomes.
• Excellent communication of risks to non-technical audiences.
• Experience with governance, assurance, compliance, and incident management.
• Experience collaborating with cross-functional teams.

Responsibilities

• Act as a trusted business information security officer across Co-op, balancing risk with business objectives
• Translate priorities into practical security controls, assurance activities, and risk management plan
• Identify, assess, and communicate cyber risks to support informed decision-making
• Support compliance with security policies, standards, and regulations
• Embed secure-by-design principles into products and projects
• Partner with product, engineering, and operations to consider security from the start
• Support audits, assurance activities, and security reporting for senior colleagues
• Act as a key security contact during incidents and drive improvements

Skills

Cyber security

Risk management

Stakeholder communication

Governance

Job description

The Co-op in Manchester is seeking a Business Information Security Officer to embed security into strategy and product delivery. You’ll partner with senior leaders, translate risks into practical controls, and shape a culture where security is everyone’s responsibility.

This hybrid role requires two days a month in the office and offers a clear impact across our products and services. You’ll lead risk discussions, support audits, and champion secure-by-design practices while meeting regulatory