Business Information Security Officer

Bloomberg Intelligence; Greater London; On-site; GBP 80,000 - GBP 100,000; Full time

Job summary

A leading financial information company is seeking a Business Information Security Officer to manage and develop security programs across various domains. This role requires 7+ years of extensive experience in information security and the ability to influence stakeholders effectively. You will be responsible for defining security strategies, managing cyber risks, and reporting to senior management. Strong technical knowledge in cyber security domains and industry-standard certifications are required.

Benefits

Diversity and inclusion drive

Flexible recruitment process

Career development opportunities

Qualifications

• 7+ years of experience in information security or cyber security.
• Proven ability to lead complex projects with cross-functional teams.
• Strong knowledge of regulatory standards including GDPR and ISO 27001.

Responsibilities

• Develop security programs based on business domain understanding.
• Manage cyber risk through effective security controls.
• Prepare reports for senior management on security programs.

Skills

Information security expertise

Cyber security risk management

Communication skills

Stakeholder influence

Project delivery

Education

Industry-recognized certifications such as CISSP, GIAC, CISM

Tools

Cloud security solutions

Security tooling

Business Intelligence Tools

Job description

Overview

Business Information Security Officer

Location: London

Business Area: Legal, Compliance, and Risk

Ref #: 10048769

Description & Requirements

Our Team:

We protect Bloomberg.

The Bloomberg Information Security Office team is dedicated to making our products and technologies as secure as possible through design, development, and operation. We report into the Chief Information Security Office while working closely with regulated businesses, key lines of business, and development/engineering across Bloomberg L.P. Our colleagues depend on us to help design, run, and improve our most important security programs.

What\'s in it for you

The Bloomberg BISO team focuses on identifying opportunities to improve the security of Bloomberg, our products and services, and the security of our customers’ data. In this role, you will be the owner, manager, and developer of multiple security programs, each with unique challenges and in a global setting. You will be responsible for setting strategic direction, evangelizing security and compliance efforts, and influencing the direction of Bloomberg L.P.’s business efforts all in a day’s work.

Responsibilities

• Develop a deep understanding of your business domains, keeping abreast of new technologies, regulatory changes, and industry best practices as you design, lead, and oversee the information security programs for your lines of business.
• Work with stakeholders to effectively manage cyber risk including consulting on security controls, mitigation strategies, and incident response planning and management.
• Foster cross-functional relationships between teams to improve all aspects of our security program.
• Define and develop management information, including key risk indicators, program maturity indicators, and key performance indicators for use in reporting.
• Establish and review information security policies and procedures in your line of business.
• Become a trusted voice to senior management, report on the status of information security programs to boards and various governance forums.
• Lead in the development and delivery of scenario testing such as Tabletop Exercises and Threat Led Penetration Testing.
• Lead remediation efforts and support transformational change initiatives across the broader organization.

Qualifications

• 7+ years of experience in information security, cyber security risk management, data security and cyber security regulation.
• Demonstrated ability to influence internal and external stakeholders to achieve success in a complex global setting.
• Proven delivery of complex projects involving cross-functional teams.
• Ability to proactively identify and manage cyber security risks to deliver services and meet business objectives in a secure and compliant way.
• Strong technical knowledge in key cyber security domains such as cloud security, network security and architecture, application security, secure software development lifecycle (SSDLC) and vulnerability management.
• Proven experience in delivering Threat Led Penetration Tests such as CBEST or equivalent TLPT regimes.
• Good knowledge of key technologies such as Operating Systems, Software Development Build Pipelines and Processes, Security Tooling, O365 Suite, and Business Intelligence Tools.
• Experience with industry standards such as NIST CSF and ISO 27001.
• Knowledge and experience with Regulation pertaining to Information Security such as DORA, Operational Resilience, UK CTP Regime, GDPR.
• Excellent written and oral communication skills.
• Demonstrated ability to perform under pressure and consistently meet program deadlines.
• An industry recognized certifications such as CISSP, GIAC, CISM, ISO 27001 Lead Implementor/Auditor.

If This Sounds Like You

Apply if you think we\'re a good match. We\'ll get in touch to let you know what the next steps are, but in the meantime feel free to have a look at: https://www.bloomberg.com/company/what-we-do/

Discover what makes Bloomberg unique - watch our for an inside look at our culture, values, and the people behind our success.

Bloomberg is an equal opportunity employer and we value diversity at our company. We do not discriminate on the basis of age, ancestry, color, gender identity or expression, genetic predisposition or carrier status, marital status, national or ethnic origin, race, religion or belief, sex, sexual orientation, sexual and other reproductive health decisions, parental or caring status, physical or mental disability, pregnancy or parental leave, protected veteran status, status as a victim of domestic violence, or any other classification protected by applicable law.

Bloomberg is a disability inclusive employer. Please let us know if you require any reasonable adjustments to be made for the recruitment process. If you would prefer to discuss this confidentially, please email [e-mail]