Business Information Security Officer & Cybersecurity Programme Lead
We are seeking an experienced Business Information Security Officer & Cybersecurity Programme Lead to strengthen information security governance, manage cyber risk, and lead the delivery of strategic security initiatives. This role will act as a trusted adviser to business and technology stakeholders, translating regulatory obligations and security requirements into practical, risk-based solutions. You will help promote a strong security culture while ensuring that information assets, systems, and services are appropriately protected.
Key responsibilities include maintaining and enhancing information security policies, standards, procedures, and control frameworks; coordinating risk assessments, control reviews, and remediation plans; and providing clear reporting on security risks, compliance, incidents, and programme progress. You will lead a portfolio of cybersecurity projects from planning through implementation, managing scope, dependencies, budgets, risks, and benefits. The role will also support security incident management, business continuity, third-party assurance, audit activity, vulnerability management, and the continuous improvement of security controls. You will work closely with architecture, infrastructure, applications, data protection, legal, procurement, and operational teams, as well as external partners where appropriate.
The successful candidate will have substantial experience in information security, cyber risk, governance, or security programme delivery, ideally within a complex or regulated environment. You should be confident interpreting frameworks and regulations such as ISO 27001, NIST, CIS, or applicable data protection requirements, and experienced in presenting security matters to senior stakeholders. Strong programme and project management skills, excellent written and verbal communication, and the ability to influence without direct authority are essential. Relevant professional qualifications, such as CISSP, CISM, CRISC, ISO 27001 Lead Implementer or Auditor, or recognised project management certification, would be advantageous. A pragmatic, collaborative approach and a commitment to continuous improvement are vital for success.
Business Information Security Officer & Cybersecurity Programme Lead
Other similar jobs
Popular job searches
Your next job
starts here.
JOB SPECIALISMS
LATEST JOBS
TOP SEARCHES
LOCATIONS
- Security Engineer
- Security Analyst
- Security Architect
- Security Consultant
- IT Security Manager
- Identity Access Management IAM
- SOC Analyst
- Cyber Security Consultant
- Data Protection
- Penetration Tester
- Application Security
- Governance and Compliance
LATEST JOBS
- Senior Manager, Business Infor...
- Senior Data Protection Manager
- Cyber Security Engineer
- PAM Consultant
- Associate Security Engineer
- GRC Consultant
- Cyber Security Manager
- Risk & Controls Analyst (Cyber...
- Security Analyst – Emerging Te...
- PAM Architect
- Senior GRC Analyst
- OT SIEM Engineer