Be at the heart of actionFly remote-controlled drones into enemy territory to gather vital information.

Apply Now

Principal Security Architect

Bupa
Salford
8 months ago
Applications closed

Related Jobs

View all jobs

Lead Security Solution Architect

Security Solution Architect

Principal Sales Engineer

Principal Waste Contract Officer

Systems Engineer – Security & M365

Account Manager

Job Description:

Principal Security Architect

Permanent

London / Staines / Manchester (Hybrid Working)

Full time

Closing date: Tuesday 18h February 2025

We make health happen.

At Bupa, we’re passionate about technology. With colleagues, customers, patients and residents in mind you’ll have the opportunity to work on innovative projects and make a real impact on their lives.

Right from the start you’ll become part of our digital strategy, joining us on our journey and developing yourself along the way.

As the Principal Security Architect for Bupa Global, India, and UK (BGIUK) you’ll be responsible for providing senior technical security leadership and guidance to cross functional teams on security technologies, architecture and design. We’ll look to you for direction and recommendations to improve the overall security posture of BGIUK.

How you’ll help us make health happen:

Support the Director of Cyber Technology to develop the BGIUK Cyber Security Strategy and own the associated technology roadmaps to maintain our security posture.

Support the wider Bupa leadership to develop product roadmaps that incorporate security by design.

Define our target Security Architecture, ensuring it’s integrated and aligned with our Cyber Security Strategy and overarching target Enterprise Architecture.

Inspire, manage, and develop a team of security consultants and architects to deliver security architecture service and embed security within agile ways of working.

Develop and maintain repeatable security architecture artifacts (models, patterns, templates, standards, and procedures).

Collaborate with other teams to develop and maintain security policies, procedures, and standards, considering legal, governance and regulatory requirements (e.g. NIST, PCI-DSS, Enterprise Risk Framework, and GDPR).

Foster innovation and digital transformation, ensuring the ethical and secure adoption of new technologies within the business, including the technology and CISO teams.

Represent the CISO team at all design authorities and architectural forums, taking ownership of security architecture design forums and governance processes 

What you’ll bring

Solid experience in cyber security with specific architecture/consultancy experience in large-scale organisations.

A proven track record of implementing security architecture, designing security controls, design reviews and security solution architecture.

Strong knowledge and implementation experience specific to Network & Infrastructure Security, Application Security, Cloud Security (IaaS, PaaS, SaaS), Data Security

Good knowledge of designing the deployment of applications and infrastructure into public cloud services.

Strong knowledge of security assessment methodologies and delivering a security assessment service.

Experience of developing security standards and patterns.

Strong knowledge of enterprise security frameworks, best practices and principles.

Proven Experience using threat modelling and translating this into security requirements.

A recognised security security accreditation such as CISSP, CISM, SABSA, GAIC or a recognised Degree/ Masters qualification in Information Security.

Benefits

Our benefits are designed to make health happen for our people. Viva is our global wellbeing programme and includes all aspects of our health – from mental and physical, to financial, social and environmental wellbeing. We support flexible working and have a range of family friendly benefits.

Joining Bupa in this role you will receive the following benefits and more:

25 days holiday, increasing through length of service, with option to buy or sell

Bupa health insurance as a benefit in kind

An enhanced pension plan and life insurance

Annual performance-based bonus

Onsite gyms or local discounts where no onsite gym available

Various other benefits and online discounts

Why Bupa? 

We’re a health insurer and provider. With no shareholders, our customers are our focus. Our people are all driven by the same purpose – helping people live longer, healthier, happier lives and making a better world. We make health happen by being brave, caring, and responsible in everything we do. 

We encourage our people to “Be you at Bupa”, we champion diversity, and we understand the importance of our people representing the communities and customers we serve. That’s why we especially encourage applications from people with diverse backgrounds and experiences. 

As a Disability Confident employer, we offer a guaranteed interview for every disabled applicant who meets the minimum criteria for the job. We’ll make sure you are treated fairly and offer reasonable adjustments as part of our recruitment process to anyone that needs them. 

Time Type:

Full time

Job Area:

IT

Locations:

Angel Court, London, Bupa Place, Kirkstall Forge, Staines - Willow House

Subscribe to Future Tech Insights for the latest jobs & insights, direct to your inbox.

By subscribing, you agree to our privacy policy and terms of service.

Industry Insights

Discover insightful articles, industry insights, expert tips, and curated resources.

Cyber Security Recruitment Trends 2025 (UK): What Job Seekers Must Know About Today’s Hiring Process

Summary: UK cyber security hiring has shifted from title‑led CV screens to capability‑driven assessments that emphasise incident readiness, cloud & identity security, detection engineering, governance/risk/compliance (GRC), measurable MTTR/coverage gains & secure‑by‑default engineering. This guide explains what’s changed, what to expect in interviews, & how to prepare—especially for SOC analysts, detection engineers, blue/purple teamers, penetration testers, cloud security engineers, DFIR, AppSec, GRC & security architecture. Who this is for: SOC & detection engineers, security operations leads, DFIR analysts, penetration testers/red teamers, purple teamers, AppSec/DevSecOps engineers, security architects, cloud security engineers, identity/IAM engineers, vulnerability managers, GRC/compliance specialists, product security & security programme managers targeting roles in the UK.

Why Cyber Security Careers in the UK Are Becoming More Multidisciplinary

Cyber security used to be viewed primarily as a technical discipline: firewalls, encryption, intrusion detection, penetration testing. In the UK today, it’s far broader. Organisations now face complex legal frameworks, ethical dilemmas, human-behaviour risks, communication challenges & usability hurdles. This shift means cyber security careers are becoming more multidisciplinary. From protecting NHS patient records to defending financial services, securing supply chains & safeguarding national infrastructure, cyber security now touches every sector. Employers increasingly want professionals who understand law, ethics, psychology, linguistics & design alongside traditional technical skills. In this article, we’ll explore why UK cyber security careers are expanding in this way, how these five disciplines shape the profession, and what job-seekers & employers need to know to thrive in this new landscape.

Cyber Security Team Structures Explained: Who Does What in a Modern Cyber Security Department

Cyber security has become a top priority for UK organisations of all sizes. From small businesses to financial institutions, healthcare providers, and government bodies, the risk of cyber attack is now a constant concern. Threats are more sophisticated, regulations more demanding, and customers more aware of data privacy than ever before. But defending against cyber threats isn’t simply about having the right tools — it’s about having the right team. A modern cyber security department relies on clearly defined roles and responsibilities to ensure that defences are proactive, incidents are managed swiftly, and compliance is maintained. This article explains the structure of a modern cyber security team, the roles you’ll typically find within it, how they collaborate, and what skills, qualifications, and salaries are expected in the UK job market.