Business Information Security Officer (BISO)

Salary: £48,000 - 88,000 per year

Requirements:

• Extensive experience in Information Security or a related field, including leadership or management experience within IT or Cyber Security teams.
• Strong knowledge of industry security frameworks and standards, including ISO 27001, NIST, OWASP, PCI DSS and NIS2.
• Excellent communication skills, with the ability to translate complex technical concepts into clear, actionable guidance for both technical and non-technical audiences.
• Deep understanding of cybersecurity risks, emerging threats, and their impact on business operations, with the ability to influence decision-making at all levels.
• Proven ability to build trusted relationships with stakeholders, drive positive outcomes, and effectively challenge and influence behaviours when required.
• Strong analytical, organisational and decision-making skills, with the ability to prioritise competing demands and balance risk against business objectives.
• A proactive and collaborative leader who demonstrates integrity, sound judgement, regulatory awareness, customer focus and a commitment to fostering a positive team culture.

Responsibilities:

• Serve as the primary cybersecurity advisor and key liaison between the Security Function and business stakeholders, balancing operational needs with security requirements.
• Build trusted relationships across the Banner/Group Functions, providing expert guidance and promoting a strong culture of cybersecurity awareness.
• Own and maintain the cyber risk register, supporting risk-based decision making, prioritisation, reporting, and remediation tracking.
• Ensure all projects, solutions, and business changes are delivered using Secure by Design principles, identifying control weaknesses and managing associated risks.
• Lead security incident and breach response activities between Technology and the business, participating in the Cyber Security Incident Response Team (CSIRT) where required.
• Drive assurance and governance activities by reviewing systems, applications, platforms, suppliers, and processes against security frameworks, policies, and standards.
• Provide regular reporting and strategic insight to senior stakeholders, ensuring security strategy, vulnerability management, and business roadmaps are aligned with organisational goals and compliance requirements.

Technologies:

• Support
• OWASP
• Security
• Embedded

More:

Were Kingfisher, a team made up of over 74,000 passionate people who bring Kingfisher and our other brands — B&Q, Screwfix, Brico Depot, Castorama and Koctas — to life. Guided by our purpose, Better Homes. Better Lives. For Everyone., we believe a better world starts with better homes, and we work every day to make that a reality. This senior cybersecurity role, known internally as Banner Information Security Officer, can be based in Southampton or London Paddington, with an expectation of 12 days per month in the office. We offer a hybrid working model that blends home working with in-person collaboration, around 60% of your time on average. We provide an inclusive environment, encourage new ideas, support experimentation, and offer a competitive benefits package along with opportunities to stretch and grow your career. We are committed to diversity and inclusion and to treating all colleagues, future colleagues, and applicants equally.

last updated 37 week of 2026