Hybrid Information Security Consultant — London/UK

Bupa; Staines-upon-Thames; Hybrid; GBP 64,000 - 80,000; Full time

Benefits offered by this job

25 days holiday

Bupa health insurance

Enhanced pension plan

Onsite gyms or local discounts

Online discounts

Job summary

Bupa is hiring an Information Security Consultant to support confidentiality, integrity, and availability of information across the group. This role offers hybrid working options with London, Staines, Salford or Leeds locations and a salary between £64,000 and £80,000, plus a 10% bonus.

You will provide security consultancy, risk assessments, and governance support, shaping the security posture across Group Functions while collaborating with IT and business stakeholders.

Qualifications

• Good experience and knowledge of Information Security management, ideally with a technical degree and /or industry recognised qualifications (e.g. CISM, CISA, CISSP, GIAC).
• Experience of CSA Star Cloud Framework
• A sound understanding of British and International Security Standards (e.g. ISO/IEC 27001, ISO/IEC 27002) relevant Privacy legislation (Data Protection Act 2018) and regulatory obligations (e.g. PCI/DSS, FCA, PRA).
• Knowledge of process improvement and project management methodologies
• High interpersonal skills to enable partnership with IT and business stakeholders operating at all levels within the organisation.
• Knowledge of security architecture and design; experience of developing security requirements and ensuring these are adequately specified, represented in designs, and implemented in deployment.
• Knowledge of security policy implementation and deployment; experience of creating technical security standards based on established policy objectives and requirements.
• Knowledge of corporate procurement and tendering processes; experience of specifying security requirements in contract schedules.
• Knowledge of security process and control assurance; experience of providing assurance to customers, and gaining assurance from suppliers.
• Knowledge of current security tools, processes and techniques; experience of deploying tools, processes, training to demonstrate measurable security benefit.

Responsibilities

• Safeguard the confidentiality, integrity and availability of Bupa information and data, and the security of Bupa infrastructure and applications.
• Provide IT Security consultancy and guidance to the Group Functions domains to ensure business needs can be delivered in a secure manner, adhering to Information Risk policies and standards.
• Act as advocates for the Information Security function ensuring its vision and objectives are clearly articulated, understood and delivered.
• Undertake security assurance activities relating to domain services; Information Security risk assessment and analysis; and perform other Security Management activities including governance, compliance, strategy and awareness.
• Support the management of incidents as required.

Skills

CISM

CISA

CISSP

GIAC

CSA Star Cloud Framework

ISO27001/ISO27002

Data Protection Act 2018

PCI/DSS

FCA/PRA

Security architecture & design

Security requirements & deployment

Process improvement & PM methodologies

Security testing & threat modelling

Stakeholder collaboration

Education

Technical degree

Job description

Bupa is hiring an Information Security Consultant to support confidentiality, integrity, and availability of information across the group. This role offers hybrid working options with London, Staines, Salford or Leeds locations and a salary between £64,000 and £80,000, plus a 10% bonus.

You will provide security consultancy, risk assessments, and governance support, shaping the security posture across Group Functions while collaborating with IT and business stakeholders.