Information Security Consultant

The British United Provident Association Limited; Greater London; Hybride; GBP 64 000 - 80 000; Plein temps

Avantages offerts par ce poste

25 days holiday

Enhanced pension & life insurance

Onsite gym or discounts

Résumé du poste

Bupa is seeking an Information Security Consultant to safeguard information security across London and other UK locations. Hybrid options available; salary range £64,000–£80,000 with a 10% bonus and full-time hours (37.5 per week).

You will advise on security strategy, controls and risk management across IT and business domains. In this role you’ll assess security requirements, support incident response, ensure governance and compliance, and collaborate with cross-functional teams to strengthen

Qualifications

• Good experience and knowledge of Information Security management, ideally with a technical degree and/or industry recognised qualifications (e.g. CISM, CISA, CISSP, GIAC).
• Experience of CSA Star Cloud Framework
• Knowledge of ISO/IEC 27001/27002 and privacy/regulatory obligations (PCI/DSS, FCA, PRA)

Responsabilités

• Safeguard the confidentiality, integrity and availability of information and data and security of infrastructure and applications.
• Provide IT Security consultancy and guidance to ensure secure delivery in line with risk policies.
• Advocate Information Security vision and objectives within the organisation.
• Conduct security assurance activities including risk assessment and governance.
• Support incident management and third-party assurance as required.

Connaissances

Information Security management

Security architecture

Regulatory compliance

Risk assessment

Cybersecurity governance

Stakeholder collaboration

Formation

Technical degree

Certifications (CISM/CISA/CISSP/GIAC)

Outils

CSA Star Cloud Framework

Description du poste

Job Description: Information Security Consultant London (EC2 7HJ) or Staines (TW18 3DZ) - South preferred Salford (M50 3SP) or Leeds (LS5 3BF) Hybrid working options £64,000 - £80,000 (negotiable depending on experience) plus, fantastic benefits & 10% Bonus Full time - 37.5 hours per week

We make health happen

At Bupa, we're passionate about technology. With colleagues, customers, patients and residents in mind you'll have the opportunity to work on innovative projects and make a real impact on their lives.

Right from the start you'll become part of our digital strategy, joining us on our journey and developing yourself along the way.

Role Overview

In the role of Information Security Consultant you will be required to:

• Safeguard the confidentiality, integrity and availability of Bupa information and data, and the security of Bupa infrastructure and applications.
• Provide IT Security consultancy and guidance to the Group Functions domains to ensure business needs can be delivered in a secure manner, adhering to Information Risk policies and standards.
• Act as advocates for the Information Security function ensuring its vision and objectives are clearly articulated, understood and delivered.
• Undertake security assurance activities relating to domain services; Information Security risk assessment and analysis; and perform other Security Management activities including governance, compliance, strategy and awareness.
• Support the management of incidents as required.

How you'll help us make health happen

Consultancy

• Conduct and document information security assessments against new and existing products.
• Provide security consultancy for business as usual activities and to ensure that security related capabilities are fit for purpose and in line with the agreed operating model and risk appetite.
• Provide technical security advice and guidance to cross functional teams on security architecture and design, providing direction and recommendations to improve the overall security posture of Group Functions.
• Take responsibility to support business areas with identifying and addressing security risks and issues and drive to resolution with the relevant stakeholders in the assigned domain.
• Ensure that security requirements are specified in line with the Group Enterprise Security Reference Architecture and Global Security Patterns and appropriately reflected in design artifacts, supported in deployment by the appropriate tools, processes and metrics.
• Interpretation of security testing output, where required, to assist in prioritisation of remediation activity for vulnerabilities.
• Work as part of a high functioning team for agile delivery of services.

Information Security and Assurance

• Interpretation of Information Security policies and standards, and contribute to continual improvement
• Perform threat modelling, impact assessments and risk assessments
• Assurance of vulnerability remediations in line with Bupa standards, integrating security controls to delivery pipelines, in accordance with '-shift left- security principles.
• Drive security incident investigation activities, working with other teams, where applicable to domain services
• Third party assurance, including review of due diligence and non-functional requirements.

IT Governance

• Review information systems for compliance with policy, standards and regulatory requirements and specify any required changes.
• Responsible for ensuring compliance with organisational policies and procedures
• Review changes as appropriate on behalf of Information Security.

Relationship Management

• Manage relationships with customers of the domain for security considerations.
• Seek and act on feedback from customers and other stakeholders to ensure that Information Security services are constantly evolved and improved.

Emerging Technology Monitoring

• Maintain awareness of opportunities provided by new technology to address information security challenges.

Key Skills / Qualifications Needed For This Role

• Good experience and knowledge of Information Security management, ideally with a technical degree and /or industry recognised qualifications (e.g. CISM, CISA, CISSP, GIAC).
• Experience of CSA Star Cloud Framework
• A sound understanding of British and International Security Standards (e.g. ISO/IEC 27001, ISO/IEC 27002) relevant Privacy legislation (especially Data Protection Act 2018) and regulatory obligations (e.g. PCI/DSS, FCA, PRA).
• Knowledge of process improvement and project management methodologies
• High interpersonal skills to enable partnership with IT and business stakeholders operating at all levels within the organisation.
• Knowledge of security architecture and design; experience of developing security requirements and ensuring these are adequately specified, represented in designs, and implemented in deployment.
• Knowledge of security policy implementation and deployment; experience of creating technical security standards based on established policy objectives and requirements.
• Knowledge of corporate procurement and tendering processes; experience of specifying security requirements in contract schedules.
• Knowledge of security process and control assurance; experience of providing assurance to customers, and gaining assurance from suppliers.
• Knowledge of current security tools, processes and techniques; experience of deploying tools, processes, training to demonstrate measurable security benefit.

Benefits

Our benefits are designed to make health happen for our people. Viva is our global wellbeing programme and includes all aspects of our health – from mental and physical, to financial, social and environmental wellbeing. We support flexible working and have a range of family friendly benefits. Joining Bupa in this role you will receive the following benefits and more:

• 25 days holiday, increasing through length of service, with option to buy or sell Bupa health insurance as a benefit in kind
• An enhanced pension plan and life insurance
• Onsite gyms or local discounts where no onsite gym available
• Various other benefits and online discounts

Why Bupa?

We're a health insurer and provider. With no shareholders, our customers are our focus. Our people are all driven by the same purpose - helping people live longer, healthier, happier lives and making a better world. We make health happen by being brave, caring and responsible in everything we do. We encourage all of our people to "Be you at Bupa", we champion diversity, and we understand the importance of our people representing the communities and customers we serve. That's why we especially encourage applications from people with diverse backgrounds and experiences.

Bupa is a Level 2 Disability Confident Employer. This means we aim to offer an interview/assessment to every disabled applicant who meets the minimum criteria for the role. We'll make sure you are treated fairly and offer reasonable adjustments as part of our recruitment process to anyone that needs them.

Time Type: Full time Job Area: IT Locations: Angel Court, London, Bupa Place, Staines - Willow House

Be at the heart of helping people live longer healthier, happier lives and making a better world.

We employ more than 80,000 people globally who are making this a reality. If you've got the belief, the drive and the talent to help us in our ambition then we'd like to hear from you.

Wherever you work, one thing stands out about Bupa people. Our customers are our passion - they're at the heart of our positively different culture of care. At Bupa you'll be challenged, you'll be encouraged to innovate, and collaborate with colleagues who are committed to delivering exceptional experiences. We trust, respect and consider everyone, knowing your difference will make the difference.