Business Information Security Officer

We're looking for a Business Information Security Officer (BISO) to join our Information Security team in Manchester. In this role, you'll work closely with senior leaders, product teams, and other colleagues across Co-op to ensure security is at the heart of every decision made. Acting as a trusted advisor and partner, you'll help translate complex information security risks and controls into clear, business-focussed outcomes that support innovation and transformation. This is an opportunity to make a real impact, influencing decisions at all levels and helping to shape a culture where security is everyone's responsibility. Why this role matters Information and cyber security are essential to maintaining the trust of our colleagues, customers, and member-owners. As a BISO, you'll help make sure security is built into our products, services, and ways of working from the outset, rather than being added later as an afterthought. By partnering with teams, identifying risks early, and providing clear, pragmatic guidance, you'll enable informed decision-making and support the safe delivery of change across Co-op. Your work will help protect critical information, strengthen our resilience, and make sure we continue to meet our regulatory and security obligations while delivering better outcomes for everyone. What you'll do

• Act as a trusted business information security officer across Co-op, helping teams balance risk with business objectives
• Translate business priorities into practical security controls, assurance activities, and risk management activities driving an Information Security improvement plan
• Identify, assess, and communicate cyber and information security risks to support informed decision-making interpreting control frameworks such as NIST
• Support compliance with security policies, standards, and regulations
• Embed secure-by-design principles into products, services, and change projects
• Partner with product, engineering, and operational teams to make sure security is considered from the beginning
• Support audits, assurance activities, and security reporting for senior colleagues
• Act as a key security contact during incidents and help drive improvements based on lessons learned
  
  Strong knowledge of cyber and information security principles and risk management practices
• Experience translating technical security requirements into practical business outcomes
• The ability to communicate risks and recommendations clearly to non-technical audiences
• Experience working with business, technology, product, or operational teams
• Knowledge of secure-by-design approaches and embedding security into delivery processes
• An understanding of governance, assurance, compliance, and incident management activities
• Good relationship and partner management skills, with the ability to challenge constructively
  
  At Co-op, we're owned by our members. And because we're owned by you, we can do right by you. So when you join us, you're not just taking a job, you're joining a movement. We're an organisation that puts people and communities first, and we're powered by purpose. We want this to be a place where you can thrive, so you'll also receive:
• Private healthcare
• An annual bonus (based on personal and business performance)
• 28 days holiday (rising to 32 with service) plus bank holidays
• A pension with up to 10% employer contributions
• The opportunity to increase your earnings by joining our on-call rota
• Access to a subsidised onsite gym (at our Manchester HQ)
• 30% discount on Co-op products and 10% off other brands
• Stream - early access to a percentage of your pay as you earn it
• Virtual healthcare including GP appointments, mental health support, nutrition and fitness advice
• 24/7 colleague support service
• Training and support for your development and career progression
• Cycle-to-work scheme