B

Bupa

Multinational health insurer and care provider

Biso – Internal Platforms

Security Governance, Risk & CompliancePosted on Nov 9
Full-timeNo salary listed

About the Job

Requirements

  • Significant experience in cyber security, technology risk management and resilience within a large organisation.
  • Experience working in a regulated environment, such as healthcare, financial services or another complex industry.
  • Strong knowledge of security and risk frameworks such as ISO 27001, NIST, CIS, OWASP, ITIL or COBIT.
  • Experience working with cloud technologies, particularly Azure, Google Cloud and modern identity and access management solutions.
  • A good understanding of cyber threats, security operations, AI security, data protection, encryption, business continuity and operational resilience.
  • Excellent stakeholder management skills with the ability to influence and build credibility at senior levels.
  • Strong analytical and problem-solving skills, with the ability to balance risk and business outcomes.
  • Experience driving continuous improvement and introducing more efficient, effective ways of working.
  • A recognised industry qualification such as CISSP, CISM, CRISC, or an equivalent degree or postgraduate qualification in Information Security or Technology.

Responsibilities

  • Lead information security, technology risk and resilience activities across Internal Technology Platforms.
  • Build trusted relationships with technology and business leaders to embed security standards and best practice.
  • Provide clear, practical, risk-based guidance to strategic programmes, product teams and operational activities.
  • Help ensure new technologies, including AI, cloud platforms and modern workplace tools, are adopted safely and responsibly.
  • Oversee technology risk governance activities, including risk forums, steering groups and leadership committees.
  • Maintain and manage risk registers, remediation plans and key risk indicators.
  • Support business continuity, disaster recovery and operational resilience planning.
  • Work closely with technology operations and incident response teams to learn from security events and strengthen future controls.
  • Oversee security assessments of third-party suppliers and make sure risks are managed effectively.
  • Monitor emerging cyber threats and industry developments to help shape future security strategy.
  • Translate complex security and technology risks into clear, business-friendly language for senior stakeholders.

About the Company

Bupa

Multinational health insurer and care provider

Bupa provides health insurance and direct healthcare services, including dental, optical, and aged care, to individuals, companies, and care facilities around the world. Premiums and service fees fund coverage for treatments, clinics, and care homes, with corporate wellness programs supporting employees. Unlike many competitors, Bupa operates as a provident association with no shareholders and reinvests profits into expanding services, delivering an integrated suite of health and care under one global brand across 190 countries. Its goal is to improve health and wellbeing by making quality care and support available at scale.

Company size
10,001+
Company stage
Debt Financing
Total funding
$924M
Headquarters
London, United Kingdom
Founded
1974

Recently Posted Jobs

Explore more opportunities at Bupa

See more jobs