Senior BISO, Internal Platforms (Hybrid)

Bupa; Manchester; Hybrid; GBP 90,000 - 130,000; Full time

Benefits offered by this job

25 days holiday

Pension

Private medical insurance

Health and wellbeing services

Discounts on Bupa products

Job summary

Bupa is seeking a Business Information Security Officer (BISO) to lead information security, risk and resilience across Internal Technology Platforms in a hybrid London/Manchester setting. You will partner with senior technology and business leaders to embed secure-by-design practices and govern risk across critical systems.

You'll influence strategic programmes, manage risk registers and incident response, oversee third-party security assessments, and shape a resilient security posture.

Qualifications

• Significant experience in cyber security, technology risk management and resilience within a large organisation.
• Experience working in a regulated environment, such as healthcare, financial services or another complex industry.
• Strong knowledge of security and risk frameworks such as ISO 27001, NIST, CIS, OWASP, ITIL or COBIT.
• Experience working with cloud technologies, particularly Azure, Google Cloud and modern identity and access management solutions.
• A good understanding of cyber threats, security operations, AI security, data protection, encryption, business continuity and operational resilience.
• Excellent stakeholder management skills with the ability to influence and build credibility at senior levels.
• Strong analytical and problem-solving skills, with the ability to balance risk and business outcomes.
• Experience driving continuous improvement and introducing more efficient, effective ways of working.
• A recognised industry qualification such as CISSP, CISM, CRISC, or an equivalent degree or postgraduate qualification in Information Security or Technology.

Responsibilities

• Lead information security, technology risk and resilience activities across Internal Technology Platforms.
• Build trusted relationships with technology and business leaders to embed security standards and best practice.
• Provide clear, practical, risk-based guidance to strategic programmes, product teams and operational activities.
• Help ensure new technologies, including AI, cloud platforms and modern workplace tools, are adopted safely and responsibly.
• Oversee technology risk governance activities, including risk forums, steering groups and leadership committees.
• Maintain and manage risk registers, remediation plans and key risk indicators.
• Support business continuity, disaster recovery and operational resilience planning.
• Work closely with technology operations and incident response teams to learn from security events and strengthen future controls.
• Oversee security assessments of third-party suppliers and make sure risks are managed effectively.
• Monitor emerging cyber threats and industry developments to help shape future security strategy.
• Translate complex security and technology risks into clear, business-friendly language for senior stakeholders.

Skills

Cyber security

Risk management

Resilience

Stakeholder mgmt

Education

CISSP/CISM/CRISC

Tools

Azure

Google Cloud

IAM

Job description

Bupa is seeking a Business Information Security Officer (BISO) to lead information security, risk and resilience across Internal Technology Platforms in a hybrid London/Manchester setting. You will partner with senior technology and business leaders to embed secure-by-design practices and govern risk across critical systems.

You'll influence strategic programmes, manage risk registers and incident response, oversee third-party security assessments, and shape a resilient security posture.