Hybrid Information Security Consultant – Risk & Assurance

Bupa; Salford; Hybrid; GBP 64,000 - 80,000; Full time

Benefits offered by this job

25 days holiday

Private medical insurance

Company pension

Onsite gyms or local discounts

Cycle to work scheme

Private dental insurance

Job summary

Bupa is seeking an Information Security Consultant to safeguard data, advise on secure design, and support risk-based security across Group Functions. The role covers governance, threat modelling, incident response and assurance, with hybrid working options across London, Staines, Salford or Leeds.

You will work with cross-functional teams, apply security standards, and help deliver secure systems while developing your expertise within a leading health insurer.

Qualifications

• Experience in information security management and relevant certifications.
• Solid understanding of ISO/IEC 27001/27002 and privacy/regulatory requirements.
• Ability to interpret security policies and implement security controls.
• Experience communicating with IT and business stakeholders at all levels.
• Knowledge of security testing, risk assessment and vulnerability remediation.

Responsibilities

• Conduct information security assessments on products and systems.
• Provide security consultancy to ensure secure delivery and risk alignment.
• Advise on security architecture, controls and design improvements.
• Support incident response and drive remediation with stakeholders.
• Perform governance, compliance and assurance activities.

Skills

Information security management

Security architecture & design

Risk assessment & threat modelling

Security governance & policy

Stakeholder collaboration

Incident response & investigation

Regulatory compliance awareness

Security controls in CI/CD

Education

Technical degree

CISM

CISA

CISSP

GIAC

Tools

CSA Star Cloud Framework

Job description

Bupa is seeking an Information Security Consultant to safeguard data, advise on secure design, and support risk-based security across Group Functions. The role covers governance, threat modelling, incident response and assurance, with hybrid working options across London, Staines, Salford or Leeds.

You will work with cross-functional teams, apply security standards, and help deliver secure systems while developing your expertise within a leading health insurer.