> Markdown version of [/jobs/ext/757121-information-security-engineer](https://www.wearedevelopers.com/jobs/ext/757121-information-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Information Security Engineer

- **Company:** Bupa
- **Location:** London, UK (Remote available)
- **Salary:** £55,000.0
- **Contract:** Permanent contract
- **Skills:** Cloud Computing Security, CompTIA Security+, Cyber Security, Identity and Access Management, Cloud Services, Software Vulnerability Management, System Availability, Information Technology, Network Server
- **Published:** June 9, 2026
- **Apply:** https://bupa.wd3.myworkdayjobs.com/EXT_CAREER/job/King-Edwards-VII-Hospital/Information-Security-Engineer_R1222585-1

## About the Role

* Demonstrable experience in an information security or security engineering role.
 * Strong technical understanding of security concepts and controls
 * Security certifications (e.g. AZ-500, SC-200, Security+, CISSP, CISM, CEH) are desirable
 * Experience operating vulnerability management and remediation processes
 * Experience with endpoint, network, and cloud security controls. Understanding of identity, access management and MFA
 * Experience working in regulated environments.
 * Ability to translate security risks into clear, pragmatic recommendations
 * Flexible with ability to support out-of-hours activity when required

## Description

This role provides specialist information security capability across King Edward VII's Hospital, supporting the protection of clinical, patient, and corporate information assets. The Information Security Engineer is responsible for implementing, operating, and continually improving technical security controls, vulnerability management, and security monitoring in line with organisational, regulatory, and group (Bupa/DASCL) requirements.

Working closely with IT Infrastructure, Applications, suppliers, and group security teams, the post-holder ensures that security is embedded into day-to-day operations, projects, and system design, while maintaining high availability and safety within a clinical healthcare environment., * Operate and maintain the hospital's vulnerability management programme, including scanning, prioritisation, remediation tracking and reporting

 * Monitor security tooling and alerts, supporting early detection and response to security incidents
 * Undertake technical investigation, root cause analysis and post-incident reviews

 * Technical Security Controls: Implement, configure and maintain security controls across networks, servers, endpoints, cloud services and clinical systems
 * Support endpoint protection, email security, MFA, identity security controls and log management
 * Work with Infrastructure and Applications teams to ensure secure configuration and hardening of systems.

 * Governance, Risk and Compliance: Ensure systems and services align with GDPR, Data Protection Act, NHS DSPT principles (where applicable), and Bupa security standards
 * Maintain security documentation, SOPs, technical standards, and audit artefacts

 * Design, Projects and Change: Ensure security considerations are embedded into new systems, infrastructure changes, and clinical technology deployments
 * Review designs and changes for security impact and provide risk-based recommendations.

 * Stakeholder and Vendor Engagement: Act as a technical security point of contact for suppliers, partners, and managed security services
 * Participate in group-wide security forums and working groups as required
 * Communicate security risks, issues and remediation plans clearly to technical and non-technical stakeholders


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Kubernetes Security - Challenge and Opportunity](https://www.wearedevelopers.com/videos/412-kubernetes-security-challenge-and-opportunity)
- [Leverage Cloud Computing Benefits with Serverless Multi-Cloud ML ](https://www.wearedevelopers.com/videos/78-leverage-cloud-computing-benefits-with-serverless-multi-cloud-ml)
- [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure)
- [ZEISS & Microsoft - Building the Next Generation Medical Ecosystem in the Cloud](https://www.wearedevelopers.com/videos/424-zeiss-microsoft-building-the-next-generation-medical-ecosystem-in-the-cloud)

## Related Articles

- [IT Salaries in UK](https://www.wearedevelopers.com/magazine/288-it-salaries-in-uk)
- [Data Engineer Salary UK](https://www.wearedevelopers.com/magazine/253-data-engineer-salary-uk)
- [Software Engineer Salary London](https://www.wearedevelopers.com/magazine/252-software-engineer-salary-london)
- [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk)
- [Software Engineer Salary in The UK](https://www.wearedevelopers.com/magazine/231-software-engineer-salary-in-the-uk)
- [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers)