Senior BISO: Internal Platforms & Cloud Security

Bupa UK; Staines-upon-Thames; Hybrid; GBP 90,000 - 130,000; Full time

Benefits offered by this job

25 days holiday

Enhanced pension

Private medical insurance

Wellbeing services

Discounts on products and services

Job summary

Bupa seeks a Business Information Security Officer (BISO) to lead security, risk and resilience for Internal Technology Platforms. You will partner with technology and business leaders to embed secure-by-design practices and guide strategic programmes, including AI adoption and cloud security.

In this role, you will shape risk governance, manage risk registers and support continuity planning while engaging senior stakeholders across one of the UK’s leading healthcare organisations.

Qualifications

• Significant experience in cyber security, technology risk and resilience in a large organisation.
• Experience in regulated environments such as healthcare or financial services.
• Strong knowledge of frameworks like ISO 27001, NIST, CIS, OWASP, ITIL or COBIT.
• Experience with cloud technologies (Azure, Google Cloud) and modern identity solutions.
• Understanding of cyber threats, data protection, encryption, business continuity and resilience.

Responsibilities

• Lead information security, technology risk and resilience activities across Internal Technology Platforms.
• Build trusted relationships with technology and business leaders to embed security standards.
• Provide risk-based guidance to strategic programmes and product teams.
• Ensure safe adoption of AI, cloud platforms and modern workplace tools.
• Oversee risk governance, risk registers and remediation plans.
• Support business continuity, disaster recovery and operational resilience planning.
• Collaborate with security incident teams to strengthen future controls.
• Oversee third-party security assessments and manage supplier risks.
• Monitor emerging threats and shape future security strategy.
• Translate complex risks into clear business language for senior stakeholders.

Skills

Cyber security

Technology risk

Regulated industry

Cloud (Azure/GCP)

Stakeholder management

AI security

ISO27001

NIST

CIS

OWASP

COBIT

Education

CISSP/CISM/CRISC

Relevant degree

Tools

Azure

Google Cloud

IAM

Job description

Bupa seeks a Business Information Security Officer (BISO) to lead security, risk and resilience for Internal Technology Platforms. You will partner with technology and business leaders to embed secure-by-design practices and guide strategic programmes, including AI adoption and cloud security.

In this role, you will shape risk governance, manage risk registers and support continuity planning while engaging senior stakeholders across one of the UK’s leading healthcare organisations.