Sr Manager Business Information Security Officer

DXC Technology Company; United Kingdom; Remote; GBP 90,000 - 140,000; Full time

Job summary

DXC Technology is seeking a Senior Manager, Business Information Security Officer (BISO) to lead cyber risk governance and security strategy across business units from a remote UK location. You will partner with Global Cyber Security and provide clear guidance on threats, controls, and risk priorities to senior leadership.

You will own cyber hygiene, remediation of critical risks, and ensure regulatory readiness while promoting security as a business enabler for growth and resilience.

Qualifications

• Bachelor's degree in information security, cyber risk management or related field.
• Advanced degree preferred.
• Extensive leadership experience in cyber security within regulated environments.

Responsibilities

• Serve as a trusted security advisor to business unit leadership and set cyber risk priorities.
• Partner with Global Cyber Security to align with enterprise standards and threat intel.
• Oversee cyber risk registers, remediation of high-priority risks, and control effectiveness.
• Embed DXC baseline security controls into products and transformations.
• Lead audits, regulatory examinations, and client engagements related to cyber security.

Skills

Cyber security leadership

Cyber risk management

Security governance

Stakeholder management

Education

Bachelor's degree in Computer Science or related

Advanced degree preferred

Tools

NIST framework

ISO 27001

GRC tools

Job description

Job Description:

Senior Manager, Business Information Security Officer (BISO)

Location: Remote

DXC Technology is committed to building diverse, inclusive teams. We welcome applications from all backgrounds and particularly encourage interest from women, underrepresented groups, and neurodivergent candidates. We offer reasonable adjustments throughout the hiring process and are dedicated to creating a supportive, accessible environment for everyone.

Due to the nature of the work and the customers we support, the successful candidate must be eligible to meet UK Government and contractual personnel security requirements, including the applicable residency requirements for the role, and have the right to work in the United Kingdom. Some roles may also be subject to nationality requirements where these are necessary to meet UK Government or contractual security obligations.

DXC Technology is expanding its Security Programme to further embed cyber compliance, risk management, resilience and regulatory readiness into business operations. We are seeking a Senior Manager to serve as a Business Information Security Officer (BISO), aligned to key business units and service lines.

Representing the Global Chief Information Security Officer, the BISO will embed cyber security and cyber risk governance into business unit strategy, operations and product delivery. As a trusted strategic advisor to business unit leadership, you will direct security posture, control priorities, risk maturity and cyber risk decision-making, enabling the business to maintain daily operations while protecting clients, data, services and DXC's reputation.

Key Responsibilities

Strategic Cyber Leadership & Governance

• Serve as a trusted security advisor to business unit leadership, providing clear guidance on cyber threats, control effectiveness, resilience priorities and overall security posture.
• Partner with Global Cyber Security to ensure alignment with enterprise-wide security standards, policies and emerging threat intelligence.
• Establish and lead business unit cyber health reporting, risk reviews and updates for business unit leadership and Global Cyber Security.
• Promote cyber security as a business enabler for safe growth, innovation, operational resilience and client trust.

Risk & Control Management

• Oversee the business unit cyber risk register, ensuring material risks, control gaps and vulnerability themes are identified, assessed, prioritised and actively managed.
• Drive remediation of high-priority cyber risks and security issues in partnership with technology, engineering, architecture and operational stakeholders.
• Oversee the implementation and effectiveness of cyber hygiene controls, ensuring compliance assessments are aligned with business operations.
• Translate technical findings, threat intelligence and control concerns into clear business impacts and actionable recommendations for leadership.
• Partner with security architecture and cyber engineering teams to embed DXC baseline security controls into products, services, technology changes and transformation initiatives.
• Engage early in business strategy, change and delivery forums to proactively identify cyber security requirements.

Audit, Compliance & External Engagement

• Act as the senior point of contact for cyber-related audits, regulatory examinations, corporate security reviews and control assessments.
• Oversee audit-ready evidence, management responses and remediation of security findings, demonstrating compliance with cyber quality programme standards and regulatory expectations.
• Engage with clients and external stakeholders, as required, on DXC cyber security posture, control environment, resilience capabilities and risk-management practices.

What You'll Bring

Education & Foundational Experience

• Bachelor's degree in Computer Science, Information Security, Cybersecurity or a related discipline, or equivalent professional experience. An advanced degree is preferred.
• Experience in information security, cyber risk management or related technology domains.

Professional Expertise

• Senior-level cyber security leadership and cyber risk-management experience within complex, highly regulated environments.
• Deep knowledge of cyber threats, security controls, vulnerability management, identity and access management, incident response, security architecture and operational resilience.
• Strong understanding of cyber risk governance, regulatory expectations, audit engagement, issue management, and governance, risk and compliance tools and platforms.
• Demonstrated experience with security programme maturity models, control frameworks including NIST, ISO 27001 and CIS Controls, and metrics-driven security management.
• Proven ability to influence and advise business leaders on complex security and risk matters with clarity and credibility.
• Excellent written and verbal communication skills, with a track record of translating technical cyber issues into business impacts and risk-based recommendations.
• Ability to operate effectively in fast-paced, complex matrix environments with multiple stakeholders.
• Track record of building and scaling security programmes across multiple business units or geographies

At DXC Technology, we believe strong connections and community are key to our success. Our work model prioritizes in-person collaboration while offering flexibility to support wellbeing, productivity, individual work styles, and life circumstances. We’re committed to fostering an inclusive environment where everyone can thrive.