IT Director of Cyber Defence

Job Description:

Director of Cyber Defence

London / Staines / Manchester (hybrid)
Permanent

We make health happen

At Bupa, our purpose is simple: helping people live longer, healthier, happier lives and making a better world. We do this by combining trusted care with advanced technology and secure digital services.

As Director of Cyber Defence, you'll lead the teams that keep Bupa safe. From threat intelligence to incident response, you'll oversee critical security operations that protect our customers and our business. This is a high-profile role with executive visibility, shaping strategy and driving continuous improvement across a complex, global environment. You'll join a leadership team that values collaboration, innovation and resilience, with strong investment and senior sponsorship for cyber security.

Key Responsibilities

• Lead and develop Cyber Defence teams, including CSIRT (Cyber Security Incident Response Team), threat intelligence, vulnerability management, DLP (Data Loss Prevention) and security engineering.
• Act as the main escalation point for operational security issues, managing incidents and minimising impact.
• Oversee security platforms and controls that defend systems and networks against cyber threats.
• Drive threat exposure management, including vulnerability scanning, security testing and purple teaming.
• Deliver operational reporting, KPIs and risk metrics to senior stakeholders and boards.
• Maintain awareness of emerging threats and trends, shaping strategy and informing long-term vision.
• Foster a culture of integrity, agility and continuous improvement, ensuring regulatory compliance and strong customer outcomes.
• Inspire and manage a team of experts, building capability and a robust talent pipeline.

What We're Looking For

• 8+ years' experience managing information security operations and incident response in complex organisations.
• Calm, pragmatic leadership under pressure, with strong decision-making and stakeholder engagement skills.
• Deep understanding of cyber security principles, threat intelligence, vulnerability management and security operations.
• Familiarity with frameworks and standards such as OWASP, NIST, ISO 27001 and PCI DSS.
• Strong knowledge of security technologies (e.g., SIEM, SOAR, EDR/MDR, DAST/SAST, IAM) and cloud security fundamentals.
• Excellent communication skills, able to translate complex issues for executive audiences.
• Recognised security accreditation (CISSP, CISM, CIISEC) or relevant degree.

Benefits

Our benefits are designed to make health happen for our people. Viva is our global wellbeing programme and includes all aspects of health - from mental and physical, to financial, social and environmental wellbeing. We support flexible working and have a range of family-friendly benefits.

Joining Bupa in this role you will receive the following benefits and more:

• 25 days holiday, increasing with service, plus option to buy or sell
• Enhanced pension and life insurance
• Private medical insurance
• Access to health and wellbeing services
• Discounts on Bupa products and services

Why Bupa

We're a health insurer and provider. With no shareholders, our customers are our focus. Our people are all driven by the same purpose - helping people live longer, healthier, happier lives and making a better world. We make health happen by being brave, caring and responsible in everything we do.

We encourage all of our people to ”Be you at Bupa”. We champion diversity and understand the importance of representing the communities and customers we serve. That's why we especially encourage applications from people with diverse backgrounds and experiences.

Bupa is a Level 2 Disability Confident Employer. We aim to offer an interview to every disabled applicant who meets the minimum criteria for the role and provide reasonable adjustments throughout the process.

Time Type:

Job Area:

Locations: