Business Information Security Officer

About the role

This position supports a large retail organization operating in a complex, multi‑generation technology environment. You will balance strategic security planning with pragmatic execution to modernise protection while ensuring business continuity during seasonal peaks.

Key responsibilities

• Act as the primary security advisor to Retail business unit leadership, aligning security with merchandising, store operations and supply‑chain roadmaps.
• Identify, assess and communicate security risks in business terms, translating technical findings into revenue, brand and operational impact.
• Own security risk oversight for business projects and seasonal peak‑volume events, including surge capacity and incident readiness.
• Partner with business, IT, procurement and legal on third‑party and vendor risk assessments for retail suppliers, payment processors and SaaS platforms.
• Advise on secure design for new retail technology initiatives and enterprise infrastructure changes.
• Track and report the business unit’s risk posture, control gaps and remediation progress to leadership and the CISO.
• Lead incident response coordination for security events affecting stores, e‑commerce or customer data, ensuring timely communication.
• Deliver security awareness training tailored to store staff, corporate retail teams and seasonal workers.
• Support budget planning and prioritisation of security investments based on retail‑specific risk exposure.

Required profile

• Bachelor’s degree in Information Security, Computer Science or a related field, or equivalent practical experience.
• 5–6 years of experience in information security, risk management or related roles within a retail or similar environment.

Required skills

• Strong information security expertise.
• Risk assessment and mitigation.
• Incident response coordination.