European Business Information Security Officer

Brown and Brown Insurance
London
1 month ago
Create job alert

You are applying for a job at:
Brown & Brown (Europe)

We are part of Brown & Brown Insurance group.

Built on meritocracy, our unique company culture rewards self-starters and those who are committed to doing what is best for our customers.

Business Information Security Officer

Location: Hybrid - London

Package: Negotiable + Benefits

Are you passionate about cybersecurity and ready to make a significant impact in a dynamic, fast-paced environment? At Brown & Brown Europe, we're seeking an exceptional Business Information Security Officer (BISO) to lead the charge in safeguarding our European operations.

As a BISO, you'll play a pivotal role in shaping and driving our cyber security strategy. You will ensure that security measures are not only implemented but continuously improved to keep our cyber risk well within appetite. This is a unique opportunity to lead critical initiatives, collaborate with senior stakeholders, and align cyber security with our business objectives across diverse European markets.

The day to day:

  • Ensuring we have a cyber strategy that is documented, evergreen and endorsed by Technology Solutions and Europe Executive committee.
  • Demonstrating the robustness of the cyber strategy via reference to industry standards eg NIST, ISO27001 or other standards as appropriate.
  • Documenting and agreeing a Europe cyber security architecture standard which delivers the strategy. That standard is to be based on the Group standard with any deviation(s) formally approved. Representing security architecture in the Europe Architecture Review Board.
  • Ensuring the Europe standard is implemented across the Europe business.
  • Supporting the security aspects of M&A activity, both pre-deal due diligence and the post-deal 90 days security standard deployment.
  • Ensuring that security operations processes are defined, embedded, and operating to SLA across Europe.
  • Ensuring that Cyber risk is proactively assessed and managed, and that cyber events are reported on and fully closed out.
  • An active member of the team shaping the Brown & Brown security roadmap & Europe technology roadmap.
  • Responsible for ensuring the delivery of the European components of the information security roadmap.
  • Driving successful change implementation at pace across Europe and potentially wider Brown & Brown.
  • Line management of any information security teammates in the Europe budget.
  • Operational management of any Security incidents in Europe.
  • A valued member of the Brown & Brown Technology Solutions leadership team (Europe & Security).


About you:

  • BA/BS in a business or technology related field.
  • Extensive years of experience working in risk management, governance, and regulatory requirements related to cybersecurity with a specific focus on business outcomes and service delivery.
  • CISSP or CISM or ability to pass exam(s) within 90 days.
  • Working knowledge of ISO27001, NIST, Cyber Essentials and other security standards.
  • Deep experience of security architectures and the tooling required to instantiate.
  • Well networked within the security ecosystem in the UK.
  • Experience running a SOC and working cyber incidents.
  • Experience leading teams responsible for security across mid to large scale organisations (55 people +).
  • Excellent communication skills, both written and verbal.
  • Ability to quickly build trust, respect and confidence across organisational and geographical boundaries.
  • Decision making - balancing competing needs and interests.
  • Coaching and mentoring.
  • Continual desire to deliver excellence and improve.
  • Able to effectively analyse risk within the context of business problems.
  • Ability to successfully drive change across the organisation.
  • The successful candidate will successfully blend excellent leadership with deep technical expertise.


Advantageous:

  • Insurance Industry experience, financial services industry experience.
  • Agile delivery qualifications (eg SAFe).


The rewards:

  • A negotiable basic salary and all the normal benefits you'd expect (Holiday, company pension etc.).
  • A collaborative, open and honest environment that is designed to deliver the best outcomes to our clients and staff.
  • A flexible working methodology to enable you to be where you need to be; if you don't need to be in an office then don't. If you want to be in an office, you're welcome to use one.
  • An environment built around supporting and developing our staff with funding available for relevant professional qualifications.


We are an Equal Opportunity Employer. We take pride in the diversity of our team and seek diversity in our applicants.#J-18808-Ljbffr

Related Jobs

View all jobs

Information Security Specialist - Data

Information Security Specialist - German Speaking

Defence Digital Programme Delivery Manager

UKI Corporate Security Operations Lead

Sailpoint Support Engineer

Data Protection Officer, Europe

Get the latest insights and jobs direct. Sign up for our newsletter.

By subscribing you agree to our privacy policy and terms of service.

Industry Insights

Discover insightful articles, industry insights, expert tips, and curated resources.

Job-Hunting During Economic Uncertainty: Cyber Security Edition

The cybe rsecurity sector sits at the forefront of today’s digital landscape, defending businesses and governments alike from increasingly sophisticated threats. From incident response and network security to cloud protections and zero-trust architectures, cyber security professionals tackle an ever-evolving array of challenges. Yet, even this mission-critical field is not immune to economic turbulence. When broader financial markets experience uncertainty—whether through global recessions, regional downturns, or unexpected macro events—the hiring climate can shift, making roles more selective and budgets tighter. For job seekers in cyber security, this can be disconcerting. You might discover that once-abundant vacancies have become scarce, competition for the remaining positions is fiercer, or company priorities pivot away from large-scale expansions toward essential, cost-justified security projects. At the same time, data breaches and cyberattacks don’t pause during economic slowdowns—if anything, they may escalate as bad actors exploit organizational vulnerabilities. This paradox means that while the market feels tough, demand for cyber security expertise remains robust. In this article, we’ll look at: Why economic uncertainty affects cyber security hiring trends. Strategies for staying competitive, even if the number of open roles shrinks. Methods to highlight your skills, adapt to shifting priorities, and network effectively. Approaches for preserving mental well-being during prolonged searches or uncertain feedback loops. How www.cybersecurityjobs.tech can help you find the ideal security-focused role. By proactively sharpening your skill set, tailoring your professional profile, and engaging with a focused community, you can secure a rewarding cyber security job—even when the broader market feels volatile.

How to Achieve Work-Life Balance in Cyber Security Jobs: Realistic Strategies and Mental Health Tips

Cyber security is one of today’s most vital and rapidly expanding sectors. As data breaches, ransomware, and other cyber threats continue to evolve, the demand for skilled professionals is surging across industries—from finance and healthcare to government and e-commerce. Whether you’re a penetration tester, security analyst, or threat intelligence expert, you play a key role in safeguarding digital infrastructure and sensitive information. This high-stakes environment, however, often comes with intense pressure. Long hours, constant vigilance, and an ever-changing threat landscape can make it challenging to find time for personal well-being. Many cyber security specialists report difficulty striking a sustainable work-life balance, unsure if it’s even possible in a field that never truly sleeps. Yet, as concerns about mental health and burnout become more pressing, professionals and employers alike are seeking better ways to combine career advancement with a fulfilling personal life. In this comprehensive article, we’ll explore how to achieve a work-life balance in cyber security. You’ll discover strategies for managing 24/7 threat alerts, the importance of realistic expectations, ways to maintain mental health in high-intensity roles, and tips for setting boundaries without compromising your professional growth. Whether you’re new to this dynamic arena or already an established specialist, these insights can help you thrive personally and professionally in the fast-paced world of cyber security.

Transitioning from Academia to the Cyber Security Industry: How Researchers Can Harness Their Skills to Protect Commercial Environments

Cyber security has become a mission-critical field in an era where data breaches, ransomware attacks, and sophisticated hacking techniques threaten businesses and public institutions alike. As digital transformation touches nearly every facet of modern life, the need for highly skilled individuals capable of defending systems and networks continues to grow. For PhDs and academic researchers with expertise in areas like cryptography, network security, or threat intelligence, this presents an exciting opportunity to deploy your analytical prowess in a high-impact, fast-paced commercial setting. In this guide we’ll explore how academics can successfully pivot from the research lab to the cyber security industry. Learn how to apply rigorous, theory-driven approaches to real-world challenges, from designing secure software architectures to neutralising advanced persistent threats. By embracing the industry’s urgency and end-to-end mindset, you can transform your scholarly insights into robust, market-facing security solutions that protect companies and users on a global scale.