Hybrid Information Security Consultant – Elevate Security

Bupa; Stretford; Hybrid; GBP 64,000 - 80,000; Full time

Benefits offered by this job

25 days holiday

Bupa health insurance

Enhanced pension

Onsite gyms or local discounts

Other benefits

Job summary

Bupa is seeking an Information Security Consultant to safeguard confidentiality, integrity and availability of data across its systems. The role offers hybrid working from London, Staines, Salford or Leeds with a competitive salary and a 10% bonus.

You will provide IT security consultancy, support governance and risk management, and help embed security into delivery pipelines while collaborating with cross-functional teams across the Group Functions.

Qualifications

• Good experience and knowledge of Information Security management, ideally with a technical degree and/or industry recognised qualifications (e.g. CISM, CISA, CISSP, GIAC).
• Experience of CSA Star Cloud Framework
• Understanding of ISO/IEC 27001/27002 and relevant privacy/regulatory obligations (PCI/DSS, FCA, PRA)
• Knowledge of process improvement and project management methodologies
• Strong interpersonal skills enabling partnerships with IT and business stakeholders
• Knowledge of security architecture and design; developing security requirements and ensuring they are reflected in designs and deployment
• Knowledge of security policy implementation and security standards development
• Knowledge of security procurement and tendering processes; specifying security requirements in contracts
• Knowledge of security process and control assurance; providing assurance to customers and suppliers
• Knowledge of current security tools, processes and techniques; deploying tools and training to demonstrate security benefits

Responsibilities

• Conduct and document information security assessments for new and existing products.
• Provide security consultancy for BAU activities and ensure security capabilities align with operating model and risk appetite.
• Advise cross-functional teams on security architecture and design; guide improvements to security posture.
• Identify and remediate security risks in collaboration with stakeholders in the domain.
• Ensure security requirements align with Group Enterprise Security Reference Architecture and global patterns.
• Interpret security testing outputs to prioritise remediation of vulnerabilities.
• Work within a high-functioning Agile delivery team.

Skills

Information security management

Security architecture & design

Threat modelling

Security controls in delivery

Stakeholder collaboration

Education

CISM

CISA

CISSP

GIAC

Bachelor's degree in IT or related field

Tools

CSA Star Cloud Framework

Job description

Bupa is seeking an Information Security Consultant to safeguard confidentiality, integrity and availability of data across its systems. The role offers hybrid working from London, Staines, Salford or Leeds with a competitive salary and a 10% bonus.

You will provide IT security consultancy, support governance and risk management, and help embed security into delivery pipelines while collaborating with cross-functional teams across the Group Functions.