Business Information Security Officer & Cybersecurity Programme Lead

Business Information Security Officer & Cybersecurity Programme Lead - (BISO
0926.1)

Business Information Security Officer & Cybersecurity Programme Lead

Location

Job Description

At Gist, we're proud to be part of the M&S Group, the logistics engine behind M&S Food.

From our distribution centres to our transport operations and support functions, we connect people, technology and expertise to ensure the right products reach the right stores at the right time.

As we continue to invest in our people, technology and network, there's never been a more exciting time to join Gist and help shape the future of food logistics.

The Opportunity

We are looking for an experienced Business Information Security Officer (BISO) & Cybersecurity Programme Lead to join Gist and play a pivotal role in strengthening and transforming our cybersecurity capability.

This is a high impact role at the intersection of business, technology, risk and security. You will be responsible for ensuring Gist maintains a fit-for-purpose cybersecurity posture, while leading the delivery of our cybersecurity transformation roadmap and establishing the operating model needed to sustain long-term security maturity.

You will work closely with business leaders, technology teams, M&S Information Security, auditors, suppliers and strategic partners providing pragmatic security leadership, challenging where necessary and ensuring cyber risk is understood, managed and reported effectively.

What you'll be doing

Reporting to the Head of Technology Operations & Security, you will lead our cybersecurity roadmap, strengthen our security operating model and provide pragmatic leadership that protects the business while enabling it to grow.

As the BISO, you will connect business, technology, M&S Information Security, auditors and strategic partners, ensuring cyber risk is understood, managed and embedded into decision making. You will lead security risk and assurance, own the Security risk register, oversee audits and remediation, and provide clear reporting to senior leaders.

You will drive our cybersecurity transformation programme, turning strategy into action, coordinating teams and partners, managing risks and dependencies, and building compelling business cases for security investment. As well as providing security oversight across major change and incidents, ensuring lessons learned translate into lasting improvements.

You will be a pragmatic, confident security leader with strong experience across cybersecurity governance, risk, assurance or programme delivery. You will be a strong communicator and influencer, comfortable challenging at all levels and translating complex security risks into practical business actions.

What we're looking for

We are looking for someone who combines strong cybersecurity expertise with excellent business judgement and the ability to make security practical. You will be able to demonstrate:

• Significant experience in cybersecurity governance, information security, risk management, compliance or security programme leadership.
• A proven track record of delivering security transformation and risk reduction initiatives.
• Experience developing business cases, executive reporting and investment recommendations.
• Strong stakeholder engagement, influencing and communication skills.
• Experience working with auditors, suppliers and strategic security partners.
• A strong understanding of modern security domains, including identity, network security, cloud security, endpoint protection, governance and risk management frameworks.
• The ability to apply pragmatism and commercial thinking to security challenges.
• Experience working across business, operational and technology teams, translating complex security risks into clear and practical actions.
• Th…