Business Information Security Officer (BISO) - Engine by Starling
$60,000–$80,000 year
Hybrid · London, England, United Kingdom
Job Summary
The Business Information Security Officer (BISO) will shape security objectives, practices, policies, and manage the information security team at Engine. Responsibilities include managing the Information Security Policy, overseeing compliance certifications like ISO 27001 and SOC 1, maintaining the Information Security Risk Register and incident response, acting as a liaison between Engine and Starling Bank’s security teams, and promoting security awareness throughout the organization. The role requires deep knowledge of security principles, regulatory compliance, excellent leadership skills, and experience in a client-facing security role, ideally in a financial services context.
Required Qualifications
- Deep understanding of cyber security principles, security standards and regulatory compliance
- Experience in a business facing security role, ideally as a BISO, CISO, or similar
- Strong business acumen and commercial awareness
- Self-starter with leadership skills
- Ability to work with various stakeholders at all levels
- Strategic and systematic thinker
- Experience in complex IT organizations including service delivery, application development, and IT infrastructure
- Understanding of information security best practices and risk management standards
Desired Qualifications
- ISC2 CISSP
- ISACA CISM
- ISACA CRISC
- CISA
- Open FAIR qualifications
- Understanding of current and emerging threats and countermeasures
- Good practical knowledge of security technologies and business solutions including Identity and access management, SIEM, remote working and cloud technologies
- Experience in a banking or financial services environment
Apply with one swipe on Sorce. We auto-fill applications and apply on your behalf — no cover letters, no 40-minute forms.
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.