Business Information Security Officer

Looking for a role where information security is at the heart of everything you do? Enjoy tackling complex challenges and inspiring colleagues to stay secure? If that sounds like you, we’d love to hear from you!

We’re looking for a Business Information Security Officer (BISO) to join our Information Security team in Manchester. In this role, you’ll work closely with senior leaders, product teams, and other colleagues across Co-op to ensure security is at the heart of every decision made. Acting as a trusted advisor and partner, you’ll help translate complex information security risks and controls into clear, business-focussed outcomes that support innovation and transformation.

This is an opportunity to make a real impact, influencing decisions at all levels and helping to shape a culture where security is everyone’s responsibility.

Why this role matters

Information and cyber security are essential to maintaining the trust of our colleagues, customers, and member-owners. As a BISO, you’ll help make sure security is built into our products, services, and ways of working from the outset, rather than being added later as an afterthought.

By partnering with teams, identifying risks early, and providing clear, pragmatic guidance, you’ll enable informed decision-making and support the safe delivery of change across Co-op. Your work will help protect critical information, strengthen our resilience, and make sure we continue to meet our regulatory and security obligations while delivering better outcomes for everyone.

What you’ll do

• Act as a trusted business information security officer across Co-op, helping teams balance risk with business objectives.
• Translate business priorities into practical security controls, assurance activities, and risk management activities driving an Information Security improvement plan.
• Identify, assess, and communicate cyber and information security risks to support informed decision-making interpreting control frameworks such as NIST.
• Support compliance with security policies, standards, and regulations.
• Embed secure-by-design principles into products, services, and change projects.
• Partner with product, engineering, and operational teams to make sure security is considered from the beginning.
• Support audits, assurance activities, and security reporting for senior colleagues.
• Act as a key security contact during incidents and help drive improvements based on lessons learned.

What you’ll bring

We’re committed to making our roles as accessible as possible, so we only ask for the minimum criteria. To thrive here, you’ll need to bring:

• Strong knowledge of cyber and information security principles and risk management practices.
• Experience translating technical security requirements into practical business outcomes.
• The ability to communicate risks and recommendations clearly to non-technical audiences.
• Experience working with business, technology, product, or operational teams.
• Knowledge of secure-by-design approaches and embedding security into delivery processes.
• An understanding of governance, assurance, compliance, and incident management activities.
• Good relationship and partner management skills, with the ability to challenge constructively.

We know some people may hesitate to apply if they don’t meet every requirement. At Co-op, we’re committed to building diverse and inclusive teams, so if you’re excited about this role but your experience doesn’t align perfectly, we still encourage you to apply.

We’re also open to applications from people who may require flexible working arrangements. There’ll be an opportunity to discuss your flexible working requirements during the interview process, and at offer stage.

Why Co-op?

At Co-op, we’re owned by our members. And because we’re owned by you, we can do right by you. So when you join us, you’re not just taking a job, you’re joining a movement. We’re an organisation that puts people and communities first, and we’re powered by purpose. We want this to be a place where you can thrive, so you’ll also receive:

• Private healthcare.
• An annual bonus (based on personal and business performance).
• 28 days holiday (rising to 32 with service) plus bank holidays.
• A pension with up to 10% employer contributions.
• The opportunity to increase your earnings by joining our on-call rota.
• Access to a subsidised onsite gym (at our Manchester HQ).
• 30% discount on Co-op products and 10% off other brands.
• Stream – early access to a percentage of your pay as you earn it.
• Virtual healthcare including GP appointments, mental health support, nutrition and fitness advice.
• 24/7 colleague support service.
• Training and support for your development and career progression.
• Cycle-to-work scheme.

We’re building diverse teams that reflect the communities we serve. We welcome applications from everyone, and our support centre is an inclusive environment where all our colleagues can thrive.

If you have a disability, we’ll make reasonable adjustments to support you through the recruitment process. We’re also proud to be part of the Disability Confident scheme - if you’re disabled and you meet the minimum criteria for this job, we’ll guarantee you an interview.