Vice President, Business Information Security Office (BISO) & Security Risk

About the role

The Vice President, Business Information Security Office (BISO) & Cyber Security Risk leads the enterprise BISO function and owns cyber security risk management for the organization. Reporting to the Elsevier Information Security organization, this leader sets the vision, operating model, and priorities for security partnership across business units while serving as the senior security partner for an assigned unit.

Key responsibilities

• Build, lead, and develop a global team of BISOs and cyber‑risk professionals, handling hiring, coaching, performance management, and career development.
• Define and evolve the BISO and cyber‑risk operating model, engagement standards, and resource allocation based on risk, business criticality, and strategic priorities.
• Establish consistent methods, playbooks, and reusable artifacts to ensure high‑quality risk assessment, reporting, and partnership.
• Manage the function’s budget, headcount, and vendor relationships.
• Serve as senior escalation point for complex or high‑severity risk decisions, providing executive judgment and support.
• Act as the accountable BISO for the assigned business unit, delivering measurable security outcomes and a clear cyber‑risk posture to executive leadership.

Required profile

• Proven senior leadership experience in information security, cyber risk management, or related fields.
• Demonstrated ability to build and scale security teams across multiple business units.
• Strong executive presence with experience influencing senior stakeholders and driving security strategy.
• Excellent judgment in risk identification, assessment, treatment, and acceptance.

Required skills

What we offer

• Opportunity to shape security strategy at a global enterprise.
• Leadership role with direct impact on business resilience and innovation.
• Collaborative environment partnering with product, technology, and business leaders.