Business Information Security Officer (BISO) for News UK

Cyber UK; City of London; On-site; GBP 90,000 - 120,000; Full time

Job summary

A global media and information services company is seeking a Business Information Security Officer to lead cybersecurity initiatives. The role involves advising on strategies, ensuring compliance with regulations, and developing a tailored cybersecurity approach for the business unit. The ideal candidate will have over a decade of experience, strong communication skills, and a foundation in security architectures and compliance frameworks.

Qualifications

• Minimum of 10-15 years of professional working experience.
• CISSP or CRISC certifications are preferred but not required.
• International work experience is a plus.

Responsibilities

• Act as the primary business unit cybersecurity contact/advisor.
• Develop and maintain understanding of business unit processes.
• Lead the development of a cybersecurity strategy.
• Coordinate Cyber Risk Steering Committee.
• Drive implementation of cybersecurity policies.

Skills

Security compliance understanding

Excellent communication skills

Analytical and problem-solving abilities

Understanding of security frameworks

Ability to work in matrixed organizations

Education

Bachelor’s degree in Technology or related field

Job description

Overview

Job Description: Business Information Security Officer, Cybersecurity. Location: London. As a global media and information services company, News Corp understands the importance of cybersecurity and mitigating risk across the organization. We believe in protecting our businesses and customers and are looking to build innovative solutions that will allow us to become a global leader in cybersecurity. If cybersecurity is your passion and you want to be part of a cutting edge team, we want to hear from you!

The Business Information Security Officer (BISO) is the primary point of contact for News UK and supports the implementation of the Global Cybersecurity program within the business unit. As a trusted advisor, this individual will work with the business to understand business requirements and implement cybersecurity strategies, and will provide advice and oversight to the business to ensure the business is compliant with required cybersecurity requirements and policies. Combining business acumen with technical knowledge, this role assists in improving the security posture with respect to delivering services and partnering with News UK leadership. This role will understand the key assets and processes, identify and evaluate risks and controls, and suggest incremental controls or risk mitigation strategies where necessary. Additionally, the individual will drive and oversee business compliance with cybersecurity policy and standards while continuously monitoring and reporting on risks and documented exceptions.

Responsibilities

• Act as the primary business unit cybersecurity contact / advisor, liaising with global and local technology, legal, finance, audit, compliance, product leadership
• Develop and maintain in depth understanding of business unit processes, crown jewels, physical locations, systems, technologies, data, customers and business partners
• Lead the development of a News UK specific cybersecurity strategy, incorporating global cybersecurity strategies and initiatives, and understanding News UK business strategies and roadmaps to ensure cyber security is embedded at the right control points
• Coordinate and manage monthly Cyber Risk Steering Committee for News UK to ensure stakeholders are kept abreast of risks, threats, program maturity and projects. Update and track actions and ownership as necessary
• Drive implementation of cybersecurity policies and standards across News UK. Proactively identify non-compliance and areas of potential improvement, and facilitate development and deployment of standard solutions
• Oversee PCI, SOX, and any other required legal and/or compliance requirements, support internal technology audits, as well as support Privacy on GDPR and other similar requirements
• Provide regular and timely reporting on the status of cybersecurity across News UK
• Engage with the Incident Response Team (IRT) and provide escalation path and contact point for security issues, incidents and inquiries within News UK
• Work with the Cyber Defense, Product Security Engineering, Enterprise Security teams to assist in effectively driving program maturity across News UK

Qualifications

• Minimum of 10-15 years of professional working experience
• A Bachelor’s degree in Technology, Legal, Computer Science/Engineering, Cybersecurity, a related field or experience
• Must have a strong understanding of security compliance, policy management, security frameworks (NIST, ISO27001, PCI etc) and regulations.
• Solid foundation of security architectures and cloud computing environments
• Excellent communication skills. Ability to effectively communicate, both orally and in writing, through all levels of the organization, but especially with executives
• Excellent problem solving, critical thinking, and analytical abilities
• International work experience or experience working as part of a globally dispersed team is a plus
• Comfortable working in matrixed organizations
• CISSP or CRISC certifications not required but highly referred

About News Corp: News Corp is a global diversified media and information services company focused on creating and distributing authoritative and engaging content to consumers and businesses throughout the world. The company comprises businesses across a range of media, including news and information services, book publishing, digital real estate services, cable network programming in Australia, and pay-tv distribution in Australia. Headquartered in New York, the activities of News Corp are conducted primarily in the United States, Australia, and the United Kingdom.