Business Security Officer

Atos Group Security is the global cybersecurity backbone of Atos, a digital transformation leader. Its mission is to protect Atos’ people, data, infrastructure, and clients through a unified, proactive, and resilient security framework. Operating under the leadership of the Group CSO/CISO, the organization spans multiple domains—from corporate IT and production systems to health & safety, crisis management, and security compliance.

Atos Group Security is structured around a robust governance model, with dedicated CISOs for each business line and geography, supported by specialized teams in threat intelligence, incident response (CSIRT), and security operations (SOC). The team includes over 100 professionals globally, with a balanced onshore/offshore model.

What We Do

• Strategic Security Leadership: Defining and executing the Group’s security strategy, aligned with business goals and regulatory frameworks like ISO27001 and NIS2.
• Operational Excellence: Managing over 2,000 security incidents annually with no material impact, thanks to layered defenses, red teaming, and continuous monitoring.
• Client Trust & Compliance: Embedding security into Atos’ services and offerings, ensuring client data protection, and supporting sovereignty and compliance initiatives.
• Innovation & Resilience: Leveraging AI, advanced SIEM, and partnerships with vendors like Microsoft, CrowdStrike, and Tenable to stay ahead of evolving threats.

Where purpose meets career:

• Global Exposure & Cross-Cultural Experience: Gain opportunities to work on global initiatives and collaborate with teams across different countries, enabling you to build international experience and broaden your professional network.
• Strong Mentorship & Career Development: Benefit from structured mentoring opportunities that support continuous learning, skill enhancement, and professional growth through guidance from experienced leaders.
• Clear Pathway to Senior Leadership Roles: Accelerate your career progression with opportunities to develop into senior positions while gaining valuable exposure to Security Office functions, strategic decision-making, and organizational leadership.

Our Vision

Atos Group Security is not just a support function—it is a strategic enabler. It builds trust with clients, differentiates Atos in the market, and ensures business continuity in a volatile cyber landscape. The team’s work is instrumental in securing major events (e.g., Paris 2024), driving digital transformation, and supporting Atos’ ambition to lead in AI‑enabled services.

The role is part of the UKI Group Security Team and you would be reporting into the UKI CISO.

Responsibilities:

• Assess and report local security risks for Internal IT/Production IT/Business Line related solutions and services.
• Contribute to the achievement of Group security targets defined for Atos.
• Monitor and report the security key performance indicator, and propose improvements to increase their value in their perimeter.
• Qualify and report on security events and incidents and ensure Root Causes are understood and addressed properly.
• Contribute to risk remediation activities and Internal IT/Production IT/Business Line incidents handling, limiting exposure to internal IT/Production IT/Business Line assets.
• Take part in crisis management when needed.
• Work closely with other security officers for implementation and ongoing maintenance of the appropriate security level.
• Work on local and Global Projects & Global services deliveries and actively participate in security domain initiatives.
• Ensure the company’s ISO27001 Information Security Management System comprising policy, standards and processes/procedures is managed and all existing areas within the defined scope of applicability maintains certification.
• Cascade ISMS policies, procedures and standards within area of responsibility and ensure appropriate implementation and compliance.
• Support audits, both internal to the company and external with external certification bodies and/or Atos customers. Ensure any findings have defined action plans, which must then be delivered within the agreed target dates.
• Manage exception requests ensuring they are properly recorded, mitigating controls are identified, communicated and regularly reviewed. Mitigating controls are fully operational, fit for purpose and working as expected; risks that fall outside of the company’s risk appetite are appropriately escalated.
• Contribute to and develop ongoing security good practice guides / awareness briefings. Cascade policy updates to keep staff advised of changing security situation or as follow up to lessons learned following an incident.
• Respond to incidents and undertaking security investigations as instructed, ensuring an objective, independent and factual report is provided.
• Provide timely advice and guidance on security measures for sites and staff to undertake in new builds or reconfigurations to existing site locations, which are appropriate to the threat level and the site usage / staff role in the company.
• Assist with /support customer bids where required.
• Coordinate/liaise with key business contacts to ensure IT vulnerabilities are assessed for impact, actions identified, implemented and confirmed as completed.
• Support activities related to Security alerts received from NCSC and other external bodies. Ensuring that all alerts are reviewed and action taken as required by appropriate responsible business owner.
• Support and review any new Corporate business services or applications along with appropriate SMEs to ensure they are compliant with Atos Policies and have the required security controls.
• Ensure that the correct procedures are conducted with regard to the secure disposal of sensitive data.
• Assist with both group and GBU specific security training programmes, including reporting and maintenance.
• Support and participate in the Management Review activities, analyse data and produce inputs to the slide pack, present data at the review, action any improvements identified.
• Proactively identify improvements to Group Security and UKI ISMS policies, processes, and templates.

Requirements:

• Must have an understanding of security tools and techniques.
• Must have experience of conducting security reviews and determining security measures required in accordance with threat level / site usage.
• Able to quickly build rapport with stakeholders and senior managers.
• Fluent English language skills, able to communicate with stakeholders on a day to day basis by telephone, in writing and face to face.
• Able to travel when required within the UKI Geo and potentially to other Geos.

Communication skills:

• Must have excellent communication skills including written, verbal and presentation.

Essential Criteria – SC Eligibility:

To be eligible for Security clearance, you must have lived and worked in the UK continuously for the past 5 years.

Benefits:

• Pension Scheme - contributions matched up to 10%
• Private medical cover
• Income Protection
• Life Assurance
• 25 days paid leave + National Holidays
• Flex benefits program

Diversity, Equity & Inclusion:

Here at Atos, diversity and inclusion are embedded in our DNA. Read more about our commitment to a fair work environment for all. As a Disability Confident employer, we encourage applications from all applicants, especially, differently abled applicants. We aim to ensure that those who meet the minimum criteria for this position will be offered an interview. We are committed and willing to making reasonable adjustments to the application and assessment process to accommodate your needs.

Atos is a recognized leader in its industry across Environment, Social and Governance (ESG) criteria. Find out more on our CSR commitment.

Choose your future. Choose Atos.