Business Information Security Officer; BISO

Position: Business Information Security Officer (BISO)
Description Join us, be part of more. We're so much more than an energy company. We're a family of brands revolutionising how we power the planet. We're energisers. One team of 21,000 colleagues that's energising a greener, fairer future by creating an energy system that doesn't rely on fossil fuels, whilst living our powerful commitment to igniting positive change in our communities.

Here, you can find more purpose, more passion, and more potential. That's why working here is MoreThanACareer. We do energy differently - we do it all. We make it, store it, move it, sell it, and mend it. Centrica, Technology is a core driver of how we deliver our strategy. You'll join a team modernising our platforms, strengthening cyber and operational resilience, and advancing a product-led way of working that brings engineers, data specialists and business experts together to deliver meaningful outcomes 're scaling automation and AI from proof-of-concept into real, end-to-end change - improving customer journeys, reducing cost-to-serve, accelerating delivery, and building the digital foundations that underpin everything from energy trading and risk to field operations and critical infrastructure.

If you want to work on complex, high-impact problems using modern engineering practices, and help build reusable platforms that will shape how Centrica operates over the next decade, this is the place to do it. An opportunity to play your part
- At Centrica, we're building a more secure, resilient and digitally-enabled future, and our Business Information Security Officers play a pivotal role in making that happen. As a BISO, you'll join a team that is modernising platforms, strengthening cyber and operational resilience, and embracing a product-led way of working that brings engineers, data specialists and business experts together to deliver meaningful outcomes  this role, you'll provide strategic direction and oversight of information security for the business unit you support, ensuring alignment with Centrica's objectives, regulatory expectations and external standards.

Acting as the primary bridge between the business and the central information security function, you'll help translate security strategy into practical, value-driven outcomes while enabling informed risk management and confident decision-making. Location : UK-based hybrid role, Occasional travel to site. The Day to day
- Act as the trusted security partner to Technology CIOs and their leadership teams, providing pragmatic, risk-based advice that enables confident business and technology decisions. Lead the execution of Centrica's information security strategy within the business unit, ensuring alignment to organisational priorities, regulatory expectations and industry standards. Own information security risk management for the business unit, overseeing the identification, assessment and mitigation of risks and ensuring effective controls are designed, implemented and maintained.

Embed security-by-design across technology initiatives and change programmes, working closely with delivery teams from ideation through to live operations to strengthen resilience. Serve as the primary escalation point for cyber security governance, incidents and resilience matters, ensuring issues are managed transparently and lessons learned drive continuous improvement. Provide clear, evidence-based reporting and security awareness leadership, keeping senior stakeholders informed on security posture, key risks and progress while promoting a strong security culture.

What are the must haves
- Extensive experience in cyber and information security leadership, operating in complex, regulated enterprise environments and influencing security outcomes ven authority in security governance, risk management and compliance, with strong working knowledge of recognised frameworks and standards such as ISO 27001, NIST, COBIT and GDPR, and experience supporting control and assurance activities. Confident senior-level communicator, experienced in briefing CIOs and business leaders, translating technical risk into clear business insight and influencing decisions through credibility,…