Information Security Business Partner

Aurora Energy Research is seeking an Information Security Business Partner for its Oxford headquarters. The role involves enhancing information security across various business functions, managing risks, ensuring compliance, and fostering a security culture. Candidates should have knowledge of global security standards, experience in risk management, and strong stakeholder management skills. This position emphasizes collaboration, continuous learning, and the ability to navigate a dynamic environment.
Department: Tech - Security

Location: Oxford, UK

Description

Are you ready to raise the bar on information security and contribute to making Aurora cyber resilient?

We are looking for an Information Security Business Partner to join our Information Security team at our Oxford headquarters. You will be working across core business functions including finance, human resources, and facilities bringing your full self, including your security knowledge and expertise to these teams.

As Information Security Business Partner at Aurora Energy Research, you will enable you colleagues to better understand information risk, improve the security posture of our organisation, ensure secure operational practices, and support compliance by taking ownership of internal and external audits.

You have a curious mindset, thrive in collaboration, and can communicate with stakeholders at all levels. You are solution-oriented and focus on getting smart ideas into the hands of our teams. You enjoy working simultaneously on various initiatives and moving between teams.

Key Responsibilities
• Cultivate security culture. Work with colleagues in your partner areas, be the security champion that strives to prioritize sustainable controls and drives real risk reduction outcome
• Manage risks. Lead your colleagues in identifying, assessing, and mitigating risks by conducting regular risk assessments and ensuring compliance with relevant regulations and standards. Produce and review briefing packs including relevant management information and assessing the aggregated risk profile
• Ensure compliance. Take ownership of our information security compliance programme by leading your colleagues through information security activities including audit and risk, creating transparency with meaningful metrics. Help to solve business challenges by developing solutions to mitigate risk and non-conformities
• Support Governance. Constantly improve the organisation's understanding and adoption of information security policies and procedures in alignment with industry standards, regulations. Fostering a culture of security awareness across the organisation
• Work together. Collaborate and work with teams in your partner areas. Help to solve problems and not just calling out issues. Take ownership of assurance activities. Operate across the business to create alignment with security objectives
• Ensure security thought leadership. Keep up on security best practice and be a continuous learner. Guide and define our security policies, procedures, and standards end-to-end, be recognized as a point of escalation and subject matter expert for information technology and data risk

What we are looking for

Required qualifications, capabilities, and skills:
• Working knowledge and understanding of risks and controls associated with global security standards like SOC2 or ISO 27001 as well as regulatory requirements
• Experience in information and cyber security risk management and audit or control frameworks
• Excellent stakeholder management skills
• A desire to teach others and share knowledge. We want you to coach other team members on secure systems management practices, design principles, and implementation patterns
• Comfortable in uncharted waters. We are building something new. Things change quickly. We need you to learn technologies and patterns quickly
• Ability to see the long term. We don't want you to sacrifice the future for the present. We want you to choose technologies and approaches based on the end goals
• Clarity of thought. We operate quickly and efficiently, and we value people who are economical with their time and clear with their opinions

Desired qualifications, capabilities, and skills:
• Awareness of relevant legislation, for example the Data Protection Act and UK GDPR
• Graduate calibre or comparable working experience with relevant qualifications such as CISSP, CISM, or CISA

What we offer

Some of the benefits we include are:
• Private Medical Insurance
• Dental Insurance
• Parental Support
• Salary-Exchange Pension
• Employee Assistance Programme (EAP)
• Local Oxford Discounts
• Cycle-to-work Scheme
• Flu Jabs

At AER, we are committed to offering flexibility in the way we work. Most of our roles are hybrid with a mix of in-office/home working and potentially adjustable working hours. Let's discuss what works for you and AER during the interview process.

The Company is committed to the principle that no employee or job applicant shall receive unfavourable treatment on grounds of age, disability, gender reassignment, race, religion or belief, sex, sexual orientation, marriage or civil partnership, pregnancy and maternity.

The successful candidate would start as soon as possible. The team will review applications as they are received. Salary will be competitive with experience.

To apply, please submit your Résumé / CV, a personal summary, your salary expectations and please inform us of your notice period.