Cyber Security Business Information Officer (BISO)

TL;DR

Cyber Security Business Information Officer (BISO): Acting as the primary security partner for business units to bridge business strategy and enterprise cybersecurity with an accent on embedding secure-by-design practices. Focus on managing complex risk, strengthening cyber defenses, and ensuring security is integrated early across products and platforms.

Location: Oxford

Company

hirify.global is a global leader in information and analytics, specializing in science and health publishing and digital solutions.

What you will do

• Act as the primary security partner for assigned business units and build trusted senior stakeholder relationships.
• Embed security early into business initiatives, product development, and technology delivery.
• Oversee security assessments including vulnerability management, penetration testing, and third-party risk.
• Translate security findings into prioritized, actionable remediation plans with clear ownership.
• Provide security input into solution architecture and major technology decisions.
• Identify, document, and govern cyber risks while reporting meaningful security metrics to leadership.

Requirements

• Several years of experience in a BISO or senior security leadership/advisory role.
• Strong cloud and application security experience including AWS, Azure, or GCP and secure SDLC.
• Hands-on knowledge of security tooling such as SIEM, SOAR, EDR/XDR, CSPM, and SAST/DAST.
• Experience embedding security into CI/CD pipelines and DevSecOps practices.
• Working knowledge of security frameworks and regulations like NIST, ISO 27001, CIS, and GDPR.
• Bachelor’s degree in Engineering, Computer Science, or equivalent experience, plus relevant certifications like CISSP, CISM, or GIAC.

Culture & Benefits

• Commitment to a fair and accessible hiring process with support for accommodations.
• Access to country-specific benefits tailored to your location.
• Focus on employee well-being and long-term career success.
• Collaborative environment bridging business strategy and enterprise cybersecurity.