Head of Product Security

Bupa Insurance Limited; Greater London; Hybrid; GBP 90,000 - 120,000; Full time

Job summary

A leading health insurer is seeking a Head of Product Security in London, offering a hybrid permanent position. The individual will own the Product Security Framework, lead a team, and oversee security compliance. The role requires a degree in IT or Cybersecurity, with over 8 years of experience in the field, including leadership. This position comes with comprehensive benefits, contributing to a supportive work environment, and embracing diversity and inclusion.

Benefits

25 days holiday, increasing with service

Enhanced pension and life insurance

Private medical insurance

Access to health and wellbeing services

Discounts on Bupa products

Qualifications

• 8+ years experience in cybersecurity, with 3+ years in leadership roles.
• Strong grounding in cloud and application security.
• Experience with DevSecOps practices.

Responsibilities

• Own Bupa's Product Security Framework.
• Drive Secure by Design vision and transition to DevSecOps.
• Oversee application and cloud security compliance.

Skills

Leadership

Cloud security

Application security

Stakeholder influence

Cybersecurity frameworks

Education

Degree in IT, Cybersecurity or related field

Professional certifications like CISSP, CISM or CISA

Tools

SCA

SAST

DAST

CSPM

CNAPP

Job description

Job Description:

Head of Product Security

London / Staines / Manchester (Hybrid) Permanent

We make health happen

At Bupa, our purpose is simple: helping people live longer, healthier, happier lives and making a better world. We do this by delivering trusted healthcare services and innovative digital solutions.

As Head of Product Security, you'll play a vital role in protecting the digital products that make this possible. From mobile apps to cloud platforms, you'll ensure security is built into every stage of development. This is a unique opportunity to lead a high-performing team and shape our Secure by Design strategy, influencing how millions of customers experience safe, secure healthcare.

Key Responsibilities

• Own and develop Bupa's Product Security Framework, embedding security into the lifecycle of all digital products.
• Drive our Secure by Design vision and lead the transition to DevSecOps practices.
• Oversee application and cloud security, ensuring compliance with GDPR, ISO 27001, and NIST standards.
• Act as a thought leader, staying ahead of emerging threats and industry best practices.
• Build and manage a talented team of security specialists, fostering a culture of innovation and collaboration.
• Support audits and governance, ensuring robust reporting and risk management.
• Engage with senior stakeholders across technology and business teams to align security initiatives with strategic priorities.

What We're Looking For

• Degree-level education or equivalent experience in IT, Cybersecurity, or related field.
• Professional certifications such as CISSP, CISM, or CISA.
• 8+ years in cybersecurity, including 3+ years in leadership roles.
• Strong technical grounding in cloud and application security, including DevSecOps practices.
• Experience with security technologies (SCA, SAST, DAST, CSPM, CNAPP) and frameworks (OWASP, NIST).
• Proven ability to lead teams, influence stakeholders, and manage change in complex environments.
• Excellent communication skills and a collaborative mindset.

Our benefits are designed to make health happen for our people. Viva is our global wellbeing programme and includes all aspects of health - from mental and physical, to financial, social and environmental wellbeing. We support flexible working and have a range of family-friendly benefits.

Benefits

• 25 days holiday, increasing with service, plus option to buy or sell
• Enhanced pension and life insurance
• Private medical insurance
• Access to health and wellbeing services
• Discounts on Bupa products and services

Why Bupa

We're a health insurer and provider. With no shareholders, our customers are our focus. Our people are all driven by the same purpose - helping people live longer, healthier, happier lives and making a better world. We make health happen by being brave, caring and responsible in everything we do.

We encourage all of our people to “Be you at Bupa”. We champion diversity and understand the importance of representing the communities and customers we serve. That's why we especially encourage applications from people with diverse backgrounds and experiences.

Bupa is a Level 2 Disability Confident Employer. We aim to offer an interview to every disabled applicant who meets the minimum criteria for the role and provide reasonable adjustments throughout the process.

Time Type: Full time

Job Area: IT

Locations: Angel Court, London, Bupa Place, Kirkstall Forge