Business Information Security Officer in City of London

The Role

The Business Information Security Officer (‘BISO’) is the first point of contact for all cybersecurity requests within Alpha Bank London. This role is responsible for monitoring the performance of all security controls, and is the liaison point with the Alpha Bank Group Cyber and Information Security team. This role requires strong analytical skills, attention to detail, and a proactive approach to managing security risks.

Working pattern: Hybrid (minimum 3 days in the office including Wednesday as a core day)

What You’ll Do

• Ensure compliance with group Cyber and Information Security requirements.
• Act as the primary contact for cybersecurity requests and coordinate remediation activities.
• Support security testing, incident management, and KPI/KCI reporting.
• Evaluate security-related requests and infrastructure changes.
• Conduct post-incident analysis and promote preventive measures.
• Coordinate security awareness training for employees.
• Participate in internal and external audits related to information security.
• Be a subject matter expert on emerging threats, technologies, and regulatory changes relating to Information Security.

What We’re Looking For

• An experienced Business Information Security specialist
• A solid understanding of Cloud Security, Identity and Privileged Access Management to ensure local coverage.
• Strong analytical and problem-solving skills with high attention to detail.
• Ability to work independently and collaboratively.
• Project management experience and strong organisational skills.
• Knowledge of industry standards (ISO/IEC 27001, NIST) and regulatory compliance.

Why Join Us?

You’ll have the chance to make a real impact while experiencing our values in action:

• Innovation – Stay ahead of emerging threats and implement cutting-edge security practices.
• Collaboration – Work closely with group cybersecurity teams and internal stakeholders.
• Excellence – Deliver robust security solutions that protect critical assets.
• Delivery – Ensure timely and effective responses to security challenges.
• Empowerment – Take ownership of security initiatives and influence best practices.