Business Information Security Officer

My client, an international bank, is looking for a Business Information Security Officer to join their growing team in London. This role will require you to be in the office up to 3 times per week. No sponsorship on offer for this role I am afraid.

About the Business Information Security Officer Role:

You will be responsible for providing strategic information security leadership and oversight across all business units in the region. This role bridges global security strategy and regional business execution, ensuring that security, risk, and compliance objectives are effectively implemented, measured, and governed. You will inherit two members into your team.

The position partners closely with regional executives, technology leadership, and global security functions to embed a culture of security, drive control adoption, and maintain regulatory confidence.

This role will work alongside the EMEA regional CISO on supporting the strategy, initiatives and roadmap for information security. You will be working with key stakeholders internally to help embed security into the culture, whilst embedding technical controls into the mission critical business systems:

Risk Advisory & Control Adoption

• Serve as the trusted advisor to business and technology units on security risks and control implementation.
• Support adoption of global security controls and standards within regional operations.
• Provide security input on new business initiatives, digital transformation, and third-party relationships.

2. Security Training & Awareness

• Develop, tailor, and oversee delivery of security awareness programs by business line.
• Drive execution of phishing simulations and targeted learning interventions.
• Measure awareness effectiveness and report to management.

3. Security Champion Network

• Establish and maintain a regional security champion community within business and operations teams.
• Promote local ownership of security best practices and risk reduction initiatives.
• Provide ongoing engagement, training, and recognition programs for champions.

4. Security Strategy, Planning & Reporting

• Translate global and regional security objectives into actionable EMEA programs.
• Develop strategic plans, key risk metrics (KRIs/KPIs), and executive dashboards.
• Contribute to quarterly and annual reporting cycles for CISO and business leadership.

5. Finance, Budgeting & Resourcing

• Support regional security budgeting, forecasting, and resource allocation.
• Track spend against plan and provide variance analysis.
• Assist in developing business cases for new initiatives or investments.

6. Security Program Governance

• Oversee the implementation and governance of global security programs in EMEA.
• Ensure adherence to enterprise security policies and frameworks.
• Coordinate across multiple stakeholders to maintain governance and accountability.

7. Risk, Compliance & Audit Coordination

• Act as the single point of contact for IT Security related audits and compliance engagements.
• Manage audit readiness, evidence coordination, and remediation tracking.
• Maintain strong relationships with internal audit, compliance, and regulatory teams.

8. Reporting & Global/Regional Coordination

• Coordinate EMEA security reporting and represent the region in global BISO forums.
• Ensure consistency of risk posture and alignment with global metrics and governance.
• Provide regional input into global policy updates and program design.

If this role is of interest feel free to apply to this role, email me your CV to darius.goodarzi@robertwalters.com or call me on 0207 509 8040 for more information.

Robert Walters Operations Limited is an employment business and employment agency and welcomes applications from all candidates