Business Information Security officer (BISO)

Overview

In this role you act as the primary business-facing security lead, aligning security with business objectives and service delivery. You will partner with business and technology stakeholders to embed security into service lifecycles, governance, and change activities. You’ll drive security maturity and resilience through cross-functional coordination and actionable governance. This is an opportunity to shape security governance across complex service environments and deliver measurable improvements. You will engage with senior stakeholders to translate requirements into practical outcomes and manage security actions and reporting.

Responsibilities

• Act as the primary security representative for assigned services and maintain trusted relationships with business, technology and service stakeholders.
• Promote understanding of security responsibilities and control ownership; balance business objectives with security needs.
• Facilitate collaboration between business, delivery teams and security functions.
• Translate business, contractual, regulatory and security requirements into operational activities.
• Embed security requirements within service management processes and delivery practices.
• Assess business impact of security risks and changes; engage specialist security functions as needed.
• Support operation of the Security Management Plan and governance activities; coordinate stakeholder participation in governance, audits, and assurance.
• Track and report security actions, findings and improvement initiatives; promote remediation accountability and control improvements.
• Support development and communication of security reporting and management information; raise awareness of priorities and initiatives.
• Champion security behaviours and coordinate security champion activities; support continuous improvement initiatives.

Key requirements

• Minimum 5 years in information security, governance, risk, assurance, compliance, or related roles.
• Experience in complex enterprise or managed service environments.
• Experience with senior business, operational and technology stakeholders.
• Experience supporting governance, audit and assurance activities.
• Experience translating security requirements into practical operational outcomes.
• Experience coordinating cross-functional activities with multiple stakeholders.

• communication
• negotiation
• influencing skills
• Security governance and risk management principles
• Security assurance and control management
• Service management and operational delivery processes

…