Business Information Security officer; BISO

Position: Business Information Security officer (BISO)
The team you'll be working with:

The Business Information Security Officer (BISO) acts as the primary business-facing security lead, working under the direction of the Account Security Director (vCISO).The role ensures that business objectives, security requirements and service delivery activities remain aligned. Acting as a trusted advisor to business and operational stakeholders, the BISO promotes the effective integration of security requirements into service delivery, operational processes and business change activities.

Working closely with service teams and specialist security functions, the BISO supports the implementation of security governance arrangements, facilitates stakeholder engagement and helps drive continual improvement in security maturity, operational resilience and control effectiveness.

The role provides leadership, guidance and coordination across business and service stakeholders, helping ensure security considerations are understood, embedded and effectively managed throughout the service lifecycle.

What you'll be doing:

Business Security Leadership Act as the primary business-facing security representative for assigned services.

Build and maintain trusted relationships with business, technology and service stakeholders.

Promote understanding of security responsibilities, obligations and control ownership.

Support stakeholders in balancing business objectives, operational priorities and security requirements.

Facilitate effective collaboration between stakeholders and security functions.

Security Requirements & Service Alignment Support the translation of business, contractual, regulatory and security requirements into operational activities.

Promote the integration of security requirements within service management processes and delivery practices.

Ensure security requirements remain understood and appropriately embedded throughout the service lifecycle.

Support assessment of the business impact arising from security risks, issues and significant service changes.

Facilitate engagement with specialist security functions where additional expertise is required.

Governance, Assurance & Improvement Support Support operation of the Security Management Plan and associated governance activities.

Coordinate stakeholder participation in security governance, audit and assurance activities.

Support the tracking and reporting of security actions, findings and improvement initiatives.

Promote accountability for remediation activities and control improvements.

Contribute to the continual improvement of governance and assurance practices.

Stakeholder Engagement & Communication Facilitate communication between business stakeholders, delivery teams and security functions.

Support the development and communication of security reporting and management information.

Promote awareness of security priorities, obligations and initiatives.

Support governance forums through stakeholder coordination and action management.

Security Culture & Continuous Improvement Champion positive security behaviours and shared responsibility for security.

Support security awareness and engagement initiatives.

Coordinate Security Champion activities where established.

Encourage identification of improvement opportunities and lessons learned.

Support delivery of agreed security improvement initiatives.

Key Interfaces Account Security Director (CISO)
Business Stakeholders Technology Stakeholders Service Owners Service Delivery Managers Information Security Managers Security Architects Security Operations Teams Risk and Compliance Functions Operational Resilience Functions Audit Functions Security Champions Third-Party Suppliers and Partners What experience you'll bring:

Essential Experience Minimum 5 years' experience within information security, security governance, risk, assurance, compliance or business information security roles.

Experience operating within complex enterprise or managed service environments.

Experience working with senior business, operational and technology stakeholders.

Experience supporting governance, audit and assurance activities.

Experience translating security requirements into practical operational outcomes.

Experie…