SECURITY OFFICER

About this role

Atos is the Atos Group brand dedicated to AI-powered, secure, end-to-end digital services. Atos designs, develops, and operates critical digital environments that drive performance, resilience and sovereignty, helping public and private organizations worldwide retain control over their data and infrastructures, while meeting regulatory requirements.

With more than 54,000 employees serving over 4,500 clients across 54 countries, Atos helps modernize core IT systems, accelerate cloud and data transformation, strengthen cybersecurity, and deliver secure digital workplace environments to support its clients, its employees and society. Atos also provides consulting and advisory services through its Atos Amplify brand.

A trusted partner in operating complex and mission-critical environments, Atos supports organizations across highly regulated and sovereign contexts.

About Atos Group

Atos Group is a global leader in digital transformation with c. 56,000 employees and annual revenue of c. €7.2 billion (at the go-forward perimeter), operating in 54 countries under two brands - Atos for services and Eviden for products and systems. European number one in cybersecurity and a leader in cloud, Atos Group is committed to a secure and decarbonized future and provides tailored AI-powered, end-to-end solutions for all industries. Atos Group is listed on Euronext Paris.

What We Do*

Atos Group Security delivers

• Strategic Security Leadership: Defining and executing the Group’s security strategy, aligned with business goals and regulatory frameworks like ISO27001 and NIS2.
• Operational Excellence: Managing over 2,000 security incidents annually with no material impact, thanks to layered defenses, red teaming, and continuous monitoring.
• Client Trust & Compliance: Embedding security into Atos’ services and offerings, ensuring client data protection, and supporting sovereignty and compliance initiatives.
• Innovation & Resilience: Leveraging AI, advanced SIEM, and partnerships with vendors like Microsoft, CrowdStrike, and Tenable to stay ahead of evolving threats.

Where purpose meets career

Global Exposure & Cross-Cultural Experience

Gain opportunities to work on global initiatives and collaborate with teams across different countries, enabling you to build international experience and broaden your professional network.

Strong Mentorship & Career Development

Benefit from structured mentoring opportunities that support continuous learning, skill enhancement, and professional growth through guidance from experienced leaders.

Clear Pathway to Senior Leadership Roles

Accelerate your career progression with opportunities to develop into senior positions while gaining valuable exposure to Security Office functions, strategic decision-making, and organizational leadership.

Our Vision

Atos Group Security is not just a support function—it is a strategic enabler. It builds trust with clients, differentiates Atos in the market, and ensures business continuity in a volatile cyber landscape. The team’s work is instrumental in securing major events (e.g., Paris 2024), driving digital transformation, and supporting Atos’ ambition to lead in AI-enabled services.

The role is part of the UKI Group Security Team and you would be reporting into the UKI CISO.

Implement information security policies throughout the UKI perimeter (with local management and local and global CISOs/BSOs/ITSOs ) and coordinate assigned Business Line security operations (network, servers, desktop, applications) within the UKI perimeter liaising with key Business Line contacts.

Responsibilities

• Assess and report local security risks for Internal IT/Production IT/Business Line related solutions and services,
• Contribute to the achievement of Group security targets defined for Atos,
• Monitor and report the security key performance indicator, as well propose improvements to increase their value in their perimeter,
• Qualify and report on security events and incidents and ensure Root Causes are understood and addressed properly,
• Contribute to risk remediation activities and Internal IT/Production IT/Business Line incidents handling, and limit exposure to internal IT/Production IT/Business Line assets,
• Take part in crisis management when needed,
• Work closely with other security officers for implementation and ongoing maintenance of the appropriate security level,
• Work on local and Global Projects & Global services deliveries and actively participate in security domain initiatives.
• Ensure the company’s ISO27001 Information Security Management System comprising policy, standards and processes/procedures is managed and all existing areas within the defined scope of applicability maintains certification.
• Cascade ISMS policies, procedures and standards within area of responsibility and ensure appropriate implementation and compliance
• Support audits, both internal to the company and external with external certification bodies and/or Atos customers. Ensure any findings have defined action plans, which must then be delivered within the agreed target dates.
• Manage exception requests ensure they are properly recorded, mitigating controls are identified, communicated and regularly reviewed. Mitigating controls are fully operational, fit for purpose and working as expected; risks that fall outside of the company’s risk appetite are appropriately escalated.
• Contribute to and develop ongoing security good practice guides / awareness briefings. Cascade policy updates to keep staff advised of changing security situation or as follow up to lessons learned following an incident.
• Respond to incidents and undertaking security investigations as instructed, ensuring an objective, independent and factual report is provided.
• Provide timely advice and guidance on security measures for sites and staff to undertake in new builds or reconfigurations to existing site locations, which are appropriate to the threat level and the site usage / staff role in the company.
• Assist with /support customer bids where required.
• Coordinate/liaise with key business contacts to ensure IT vulnerabilities are assessed for impact, actions identified, implemented and confirmed as completed. All to be undertaken in a timely manager in line with the criticality of the vulnerability.
• Support activities related to Security alerts received from NCSC and other external bodies. Ensuring that all alerts are reviewed and action taken as required by appropriate responsible business owner.
• Support and review any new Corporate business services or applications along with appropriate SMEs to ensure they are compliant with Atos Policies and have the required security controls.
• Ensure that the correct procedures are conducted with regard to the secure disposal of sensitive data
• Assist with both group and GBU specific security training programmes, including reporting and maintenance
• Support and participate in the Management Review activities, analyse data and produce inputs to the slide pack, present data at the review, action any improvements identified.
• Proactively identify improvements to Group Security and UKI ISMS policies, processes, and templates.

Requirements

• Must have an understanding of security tools and techniques
• Must have experience of conducting security reviews and determining security measures required in accordance with threat level / site usage.
• Able to quickly build rapport with stakeholders and senior managers.
• Fluent English language skills, able to communicate with stakeholders on a day to day basis by telephone, in writing and face to face
• Able to travel when required within the UKI Geo and potentially to other Geos.

About security roles for ex-police

Security management, operations and consultancy roles. Years of operational policing — command, incident response, public order — translate directly into corporate security, and employers in this sector actively rate police experience.