Location
Westminster Bridge Road

Hours
Full Time

Salary
£65,000 per annum

About the Role
As a Business Information Security Officer (BISO) at Peabody, you will act as the vital link between the business, technology, and information security teams. Your role will focus on managing risk, strengthening resilience, and protecting our residents, colleagues, and data. This is an exciting opportunity to shape Peabody’s security culture, support major business initiatives, and ensure security is embedded into everyday operations.

You will partner with business teams to identify operational risks, recommend risk reduction controls, and oversee their implementation. You will lead and enhance the human and security awareness program across the Peabody group, helping colleagues understand their role in protecting Peabody’s residents, data, and services through campaigns, nudges, simulations, role-based learning, and reinforcement.

Collaboration with resident engagement teams will be key to designing and delivering resident-focused awareness initiatives. You will lead lessons learnt from incidents, near misses, audits, and assurance activities to improve awareness content, user behaviour, and corrective controls. Additionally, you will provide security governance, reporting, and assurance to support audits, risk reviews, and regulatory compliance, as well as support supplier and third-party security risk assessments to ensure appropriate controls are in place.

Experience
- Proven experience working and collaborating with different business units across an organisation.
- Ability to identify and communicate how cyber security vulnerabilities and threats impact business services and activities.
- Knowledge of implementing and providing governance and oversight of security frameworks such as ISO27001, NIST CSF, NCSC CAF, or Cyber Essentials.
- Experience deploying security awareness and human risk platforms, tailoring awareness for frontline colleagues, managers, senior leaders, and high-risk roles.
- Strong stakeholder management skills with the ability to engage both technical and non-technical audiences.
- Experience coaching, advising, and encouraging positive security behaviours across different business areas.

About you
You are confident working across multiple teams, influencing stakeholders, and embedding a strong security culture throughout the organisation. You are proactive, collaborative, and passionate about protecting people and data through effective security practices.

Qualifications
Relevant professional qualifications or certifications in information security or related fields are desirable but not explicitly required. A strong understanding of security frameworks and practical experience is essential.