> Markdown version of [/jobs/ext/1579211-business-information-security-officer](https://www.wearedevelopers.com/jobs/ext/1579211-business-information-security-officer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Business Information Security Officer - **Company:** Bupa - **Location:** Staines-upon-Thames, UK - **Contract:** Permanent contract - **Skills:** Artificial Intelligence, Microsoft Azure, Business Systems, Cloud Computing, Control Objectives for Information and Related Technology (COBIT), Cyber Security, Disaster Recovery, Open Web Application Security, Google Cloud, Cybercrime - **Published:** July 29, 2026 - **Apply:** https://www.careerjet.co.uk/job/gb97695ef3198c78f77df083ebf357c0be/eaa ## About the Role * Significant experience in cyber security, technology risk management and resilience within a large organisation. * Experience working in a regulated environment, such as healthcare, financial services or another complex industry. * Strong knowledge of security and risk frameworks such as ISO 27001, NIST, CIS, OWASP, ITIL or COBIT. * Experience working with cloud technologies, particularly Azure, Google Cloud and modern identity and access management solutions. * A good understanding of cyber threats, security operations, AI security, data protection, encryption, business continuity and operational resilience. * Excellent stakeholder management skills with the ability to influence and build credibility at senior levels. * Strong analytical and problem-solving skills, with the ability to balance risk and business outcomes. * Experience driving continuous improvement and introducing more efficient, effective ways of working. * A recognised industry qualification such as CISSP, CISM, CRISC, or an equivalent degree or postgraduate qualification in Information Security or Technology. ## Description At Bupa, our purpose is simple: helping people live longer, healthier, happier lives and making a better world. As a Business Information Security Officer (BISO), you'll play an important role in helping us deliver on that purpose. Our customers trust us with their health and wellbeing, and that trust starts with secure, resilient and reliable technology. You'll act as the senior security partner for Internal Technology Platforms, working across critical business systems and strategic change initiatives. From supporting the safe adoption of AI and cloud technologies to strengthening cyber resilience across key platforms, you'll help make sure security is built into everything we do. This is an opportunity to influence senior stakeholders, shape technology risk decisions and help create secure-by-design, resilient-by-design ways of working across one of the UK's leading healthcare organisations., As our Business Information Security Officer, you'll: * Lead information security, technology risk and resilience activities across Internal Technology Platforms. * Build trusted relationships with technology and business leaders to embed security standards and best practice. * Provide clear, practical, risk-based guidance to strategic programmes, product teams and operational activities. * Help ensure new technologies, including AI, cloud platforms and modern workplace tools, are adopted safely and responsibly. * Oversee technology risk governance activities, including risk forums, steering groups and leadership committees. * Maintain and manage risk registers, remediation plans and key risk indicators. * Support business continuity, disaster recovery and operational resilience planning. * Work closely with technology operations and incident response teams to learn from security events and strengthen future controls. * Oversee security assessments of third-party suppliers and make sure risks are managed effectively. * Monitor emerging cyber threats and industry developments to help shape future security strategy. * Translate complex security and technology risks into clear, business-friendly language for senior stakeholders. ## Related Videos - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [The Cloud is Calling: Answer with In-Demand Skills](https://www.wearedevelopers.com/videos/945-the-cloud-is-calling-answer-with-in-demand-skills) - [Fighting the Next Wave of Cybercrime](https://www.wearedevelopers.com/videos/100331-fighting-the-next-wave-of-cybercrime) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Forecasting Cyber Attacks with Glassdoor Reviews - Lianne Potter](https://www.wearedevelopers.com/videos/2143-forecasting-cyber-attacks-with-glassdoor-reviews-lianne-potter) - [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company) ## Related Articles - [Best Companies to work for in London: Top 25 Companies in 2023](https://www.wearedevelopers.com/magazine/187-best-companies-to-work-for-in-london-top-25-companies-in-2023) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk) - [Guide for Expats Living in the UK](https://www.wearedevelopers.com/magazine/355-guide-for-expats-living-in-the-uk) - [UK Business Culture and Etiquette](https://www.wearedevelopers.com/magazine/326-uk-business-culture-and-etiquette) - [IT Salaries in UK](https://www.wearedevelopers.com/magazine/288-it-salaries-in-uk)