Business Information Security Officer

Liberty Global is a dynamic operator and investor committed to generating and delivering value through the strategic management of its three platforms: Liberty Telecom, Liberty Growth and Liberty Services.

Working at Liberty Global means a career at the heart of a vibrant, innovative group of companies driving value for shareholders, people and society.

Research tells us that some candidates are put off if they can’t tick every box. If you are curious, resilient, and have a limitless mindset, plus are excited by the opportunities at Liberty Global, we encourage you to apply.

Job Purpose

The Business Information Security Officer (BISO) team are at the heart of Liberty Global's information security and transformation programme. BISOs, acting as single points of contact for their business areas, understand the strategy of their respective business units, are responsible for interactions with group shared security services, and are accountable for the security outcomes of their business units.

Communication and collaboration are central to what the BISO team does. The team helps drive business-focused security by providing tailored engagement and support across the business with a focus on delivering exceptional service at all times. BISOs are the leading force for information security and cyber risk management, with in-depth knowledge of their respective business segments positioning them to understand actual risk and unique business context.

Key Accountabilities

Engagement and Delivery:

• Develop understanding of business goals to constructively engage business leaders on information security
• Act as primary security point of contact for business leadership, typically Director level and above
• Facilitate security support to business projects by acting as interlock between business unit project leadership and wider Group Security experts
• Using in-depth security knowledge, proactively assess, review, and constructively challenge existing processes
• Work with business leaders to ensure information security policies and standards are integrated with business processes
• Manage provision of ad-hoc security advice and support to a variety of partners
• Provide security consulting and risk management support to the respective business

Risk Management:

• Develop strong relationships to build detailed understanding of security risks across the business
• Take accountability for identification, assessment and management of new and existing risks, balancing security with business priorities
• Regularly brief leadership team on cyber threats, risk profile and control improvements
• Facilitate and support timely reporting of risks to security and business leadership and customers

Culture and Awareness:

• In partnership with Security Academy, deliver against security culture and awareness strategy
• Build business awareness of emerging security threats and risks
• Regularly brief business leadership on progress against information security strategy, roadmap, and programmes
• Identify key areas of focus for education and awareness campaigns

Knowledge & Experience

Essential Skills & Abilities:

• Experience and knowledge of best practice information security controls and impact on business operations
• Highly skilled at identifying security risks and exposures as well as remedial controls and processes
• Experience of working with technical and non-technical partners to embed security controls
• Exceptional communicator with demonstrable experience providing written and verbal presentations
• Able to work independently to deliver high quality support to senior partners
• Excellent relationship management skills at all levels of organization
• Proven ability to operate effectively with minimal direction
• Passionate about information security with desire to continually develop

Desirable Skills & Abilities:

• Achieved or working towards recognized security qualification (Security+, CISM, CISSP)
• Good awareness of Security Architecture and Engineering, Security Operations, and Security Governance
• Comfortable interpreting technical requirements and translating into clear messages for non-technical audiences
• Ability to see the bigger picture – considering wider impacts of security decision making
• Strong team player that enjoys collaborative problem solving

Preferred Education/Qualifications:

• Certified Information Security Manager (CISM) / Certified Information Systems Security Professional (CISSP) / Certified in Risk and Information Systems Control (CRISC)