Business Security Officer

Atos Group Security is the global cybersecurity backbone of Atos, a digital transformation leader. Its mission is to protect Atos' people, data, infrastructure, and clients through a unified, proactive, and resilient security framework. Operating under the leadership of the Group CSO/CISO, the organization spans multiple domains—from corporate IT and production systems to health & safety, crisis management, and security compliance. Atos Group Security is structured around a robust governance model, with dedicated CISOs for each business line and geography, supported by specialized teams in threat intelligence, incident response (CSIRT), and security operations (SOC). The team includes over 100 professionals globally, with a balanced onshore/offshore model.

What We Do

• Strategic Security Leadership: Defining and executing the Group's security strategy, aligned with business goals and regulatory frameworks like ISO27001 and NIS2.
• Operational Excellence: Managing over 2,000 security incidents annually with no material impact, thanks to layered defenses, red teaming, and continuous monitoring.
• Client Trust & Compliance: Embedding security into Atos' services and offerings, ensuring client data protection, and supporting sovereignty and compliance initiatives.
• Innovation & Resilience: Leveraging AI, advanced SIEM, and partnerships with vendors like Microsoft, CrowdStrike, and Tenable to stay ahead of evolving threats.

Responsibilities

• Assess and report local security risks for Internal IT/Production IT/Business Line related solutions and services.
• Contribute to the achievement of Group security targets defined for Atos.
• Monitor and report the security key performance indicator, and propose improvements to increase its value in the perimeter.
• Qualify and report on security events and incidents and ensure Root Causes are understood and addressed properly.
• Contribute to risk remediation activities and Internal IT/Production IT/Business Line incidents handling, and limit exposure to internal IT/Production IT/Business Line assets.
• Take part in crisis management when needed.
• Work closely with other security officers for implementation and ongoing maintenance of the appropriate security level.
• Work on local and Global Projects & Global services deliveries and actively participate in security domain initiatives.
• Ensure the company's ISO27001 Information Security Management System comprising policy, standards and processes/procedures is managed and all existing areas within the defined scope of applicability maintain certification.
• Cascade ISMS policies, procedures and standards within area of responsibility and ensure appropriate implementation and compliance.
• Support audits, both internal to the company and external with external certification bodies and/or Atos customers.
• Ensure any findings have defined action plans, which must then be delivered within the agreed target dates.
• Manage exception requests to ensure they are properly recorded, mitigating controls are identified, communicated and regularly reviewed.
• Contribute to and develop ongoing security good practice guides / awareness briefings.
• Cascade policy updates to keep staff advised of changing security situations or as follow up to lessons learned following an incident.
• Respond to incidents and undertake security investigations as instructed, ensuring an objective, independent and factual report is provided.
• Provide timely advice and guidance on security measures for sites and staff to undertake in new builds or reconfigurations to existing site locations, which are appropriate to the threat level and the site usage / staff role in the company.
• Assist with /support customer bids where required.
• Coordinate/liaise with key business contacts to ensure IT vulnerabilities are assessed for impact, actions identified, implemented and confirmed as completed.
• Support activities related to Security alerts received from NCSC and other external bodies.
• Support and review any new Corporate business services or applications along with appropriate SMEs to ensure they are compliant with Atos Policies and have the required security controls.
• Ensure that the correct procedures are conducted with regard to the secure disposal of sensitive data.
• Assist with both group and GBU specific security training programmes, including reporting and maintenance.
• Support and participate in the Management Review activities, analyse data and produce inputs to the slide pack, present data at the review, action any improvements identified.
• Proactively identify improvements to Group Security and UKI ISMS policies, processes, and templates.

Requirements

• Must have an understanding of security tools and techniques.
• Must have experience of conducting security reviews and determining security measures required in accordance with threat level / site usage.
• Able to quickly build rapport with stakeholders and senior managers.
• Fluent English language skills, able to communicate with stakeholders on a day-to-day basis by telephone, in writing and face to face.
• Able to travel when required within the UKI Geo and potentially to other Geos.
• Must have excellent communication skills including written, verbal and presentation.

Benefits

• Pension Scheme - contributions matched up to 10%
• Private medical cover
• Income Protection
• Life Assurance
• 25 days paid leave + National Holidays
• Flex benefits program

Diversity, Equity & Inclusion

Here at Atos, diversity and inclusion are embedded in our DNA. We aim to ensure that those who meet the minimum criteria for this position will be offered an interview. We are committed and willing to make reasonable adjustments to the application and assessment process to accommodate your needs.