Information Security Consultant

Job Description:

Information Security Consultant London (EC2 7HJ
) or Staines (TW18 3DZ
) - South preferred

Salford (M50 3SP
) or Leeds (LS5 3BF
)Hybrid working options £64,000 - £80,000 (negotiable depending on experience) plus, fantastic benefits & 10% Bonus Full time - 37.5 hours per week

We make health happen

At Bupa, we're passionate about technology. With colleagues, customers, patients and residents in mind you'll have the opportunity to work on innovative projects and make a real impact on their lives.

Right from the start you'll become part of our digital strategy, joining us on our journey and developing yourself along the way.

Role Overview In the role of Information Security Consultant you will be required to:

- · Safeguard the confidentiality, integrity and availability of Bupa information and data, and the security of Bupa infrastructure and applications.
· Provide IT Security consultancy and guidance to the Group Functions domains to ensure business needs can be delivered in a secure manner, adhering to Information Risk policies and standards.
· Act as advocates for the Information Security function ensuring its vision and objectives are clearly articulated, understood and delivered.
· Undertake security assurance activities relating to domain services;
Information Security risk assessment and analysis; and perform other Security Management activities including governance, compliance, strategy and awareness.
· Support the management of incidents as required.

How you'll help us make health happen

As the Information Security Consultant you will cover 5 key areas listed:

Consultancy
· Conduct and document information security assessments against new and existing products.
· Provide security consultancy for business as usual activities and to ensure that security related capabilities are fit for purpose and in line with the agreed operating model and risk appetite.
· Provide technical security advice and guidance to cross functional teams on security architecture and design, providing direction and recommendations to improve the overall security posture of Group Functions.
· Take responsibility to support business areas with identifying and addressing security risks and issues and drive to resolution with the relevant stakeholders in the assigned domain.
· Ensure that security requirements are specified in line with the Group Enterprise Security Reference Architecture and Global Security Patterns and appropriately reflected in design artifacts, supported in deployment by the appropriate tools, processes and metrics.
· Interpretation of security testing output, where required, to assist in prioritisation of remediation activity for vulnerabilities.
· Work as part of a high functioning team for agile delivery of services.

Information Security and Assurance
· Interpretation of Information Security policies and standards, and contribute to continual improvement
· Perform threat modelling, impact assessments and risk assessments
· Assurance of vulnerability remediations in line with Bupa standards, integrating security controls to delivery pipelines, in accordance with ‘shift left' security principles.
· Drive security incident investigation activities, working with other teams, where applicable to domain services
· Third party assurance, including review of due diligence and non-functional requirements.

IT Governance
· Review information systems for compliance with policy, standards and regulatory requirements and specify any required changes.
· Responsible for ensuring compliance with organisational policies and procedures
· Review changes as appropriate on behalf of Information Security.

Relationship Management
· Manage relationships with customers of the domain for security considerations.
· Seek and act on…