Senior BISO – Internal Platforms (Hybrid)

BUPA; Horsforth; Hybrid; GBP 90,000 - 120,000; Full time

Benefits offered by this job

25 days holiday

Enhanced pension

Private medical insurance

Health and wellbeing services

Employee discounts

Job summary

Bupa is seeking a Business Information Security Officer to lead security, risk and resilience across Internal Technology Platforms. You will collaborate with senior technology and business leaders to embed secure-by-design practices and strengthen cyber resilience in critical systems.

The role covers AI adoption, cloud security, risk governance and incident learning, with hybrid working options and a focus on protecting health information and services.

Qualifications

• Extensive cyber security and risk management experience in a large organisation.
• Experience in regulated environments (healthcare or financial services).
• Strong knowledge of security and risk frameworks such as ISO 27001, NIST, CIS, OWASP, ITIL or COBIT.
• Ability to communicate risk to senior stakeholders.

Responsibilities

• Lead information security, technology risk and resilience activities across Internal Platforms.
• Embed security standards with technology and business leaders.
• Provide clear, practical, risk-based guidance to strategic programmes and product teams.
• Help ensure AI, cloud platforms and modern workplace tools are adopted safely.
• Oversee technology risk governance activities and maintain risk registers.
• Support business continuity, disaster recovery and operational resilience planning.
• Work with security and incident response teams to learn from events and strengthen controls.
• Oversee security assessments of third-party suppliers and manage related risks.

Skills

Cyber security

Technology risk

Resilience

Cloud security

ISO 27001

NIST

CIS

OWASP

Stakeholder management

Education

CISSP / CISM / CRISC certification

Tools

Azure

Google Cloud

IAM

Job description

Bupa is seeking a Business Information Security Officer to lead security, risk and resilience across Internal Technology Platforms. You will collaborate with senior technology and business leaders to embed secure-by-design practices and strengthen cyber resilience in critical systems.

The role covers AI adoption, cloud security, risk governance and incident learning, with hybrid working options and a focus on protecting health information and services.