Business Information Security Officer (BISO)

Kingfisher•Lower Southampton Township, PA

8d•Hybrid

About The Position

As a senior cybersecurity leader, the Business Information Security Officer (BISO), known internally as Banner Information Security Officer, acts as the key link between the Information Security team and assigned business functions. The role is responsible for aligning security strategy with business objectives, providing trusted security guidance, and ensuring cybersecurity considerations are embedded within business operations, projects, and decision-making. The BISO works closely with stakeholders across the organisation to strengthen security posture, manage risk, and support the delivery of business goals in a secure and compliant manner. This role can be based in Southampton or London Paddington with an expectation of 12 days per month in the office.

Requirements

Extensive experience in Information Security or a related field, including leadership or management experience within IT or Cyber Security teams.
Strong knowledge of industry security frameworks and standards, including ISO 27001, NIST, OWASP, PCI DSS and NIS2.
Excellent communication skills, with the ability to translate complex technical concepts into clear, actionable guidance for both technical and non-technical audiences.
Deep understanding of cybersecurity risks, emerging threats, and their impact on business operations, with the ability to influence decision-making at all levels.
Proven ability to build trusted relationships with stakeholders, drive positive outcomes, and effectively challenge and influence behaviours when required.
Strong analytical, organisational and decision-making skills, with the ability to prioritise competing demands and balance risk against business objectives.
A proactive and collaborative leader who demonstrates integrity, sound judgement, regulatory awareness, customer focus and a commitment to fostering a positive team culture.

Nice To Haves

Even if you don’t meet 100% of the requirements, we encourage you to apply.

Responsibilities

Serve as the primary cybersecurity advisor and key liaison between the Security Function and business stakeholders, balancing operational needs with security requirements.
Build trusted relationships across the Banner/Group Functions, providing expert guidance and promoting a strong culture of cybersecurity awareness.
Own and maintain the cyber risk register, supporting risk-based decision making, prioritisation, reporting, and remediation tracking.
Ensure all projects, solutions, and business changes are delivered using Secure by Design principles, identifying control weaknesses and managing associated risks.
Lead security incident and breach response activities between Technology and the business, participating in the Cyber Security Incident Response Team (CSIRT) where required.
Drive assurance and governance activities by reviewing systems, applications, platforms, suppliers, and processes against security frameworks, policies, and standards.
Provide regular reporting and strategic insight to senior stakeholders, ensuring security strategy, vulnerability management, and business roadmaps are aligned with organisational goals and compliance requirements.