Information Protection Manager

3 months ago

Central London, United Kingdom Bupa Full time

Job Description:

Information Security Manager (DLP and Insider Risk)

Hybrid- (ad hoc onsite)

Location: Salford (M50 3SP) / Staines (TW18 3DZ) / London (EC2R 7HJ) / Brighton (BN1 4FY)

Permanent

Salary range: up to £70,000 (DOE) + 10% Bonus

Full time- 37.5 scheduled hours per week


At Bupa, we’re passionate about technology. With colleagues, customers, patients and residents in mind you’ll have the opportunity to work on innovative projects and make a real impact on their lives.

Right from the start you’ll become part of our digital strategy, joining us on our journey and developing yourself along the way.

The successful applicant will lead, manage and develop the Information Protection team alongside managing enhancements and developments around Data Loss Prevention / Protection (DLP) using existing toolsets.

You’ll help us make health happen by:

The job holder is responsible for establishing and maintaining Information Protection (DLP and Insider Risk) across the Market Unit (UKI, Provisions, Group and BG).

Accountable for up to 11x direct reports.

DLP –

Oversee and ensure that a regular review of alerts is undertaken by the Information Protection team, to identify any Insider Threats such as accidental or malicious data exposure, within DLP toolsets, across all environments available within email, web, endpoint and Cloud, including but not limited to Teams, SharePoint and OneDrive.

Maintain oversight through the Information Protection team of unauthorised or non-corporate devices being connected to the cooperate LAN and inappropriate web usage and content.

Manage the teams approach to dealing directly with employees and line management across the business at all levels when handling DLP alerts.

Owning and refining the process around blocked or held content and the release process around detections.

Regularly provide management information (MI), which detail trends on the use and success of the DLP controls.

Undertake the creation of user education articles, where appropriate, and advise on best practice.

Information Security-

Work as part of the Information Security team to assist where necessary and to inform of events of security interest.

Oversee in relation to active incidents the operation and optimisation of security tooling/products, including network security (Email DLP, Web DLP, Cloud DLP, Network Access Control tooling), logging and auditing, event and incident management, privileged access management controls.

Act on security incidents, requests, and events to ensure that threats and breaches are managed to minimise impact to confidentiality, integrity and availability of systems and data.

Create and review documentation to audit standard.

Provide advice and guidance to other teams within the business on good practice and maintain relevant and current industry knowledge.

Engage with strategic third-party information security suppliers, partners, and industry forums.

Aid with the investigation of security breaches following established procedures and make sure any recommended actions are followed up reducing the likelihood of reoccurrence.

Make sure that all security incidents have been correctly prioritised and diagnose in accordance to agreed procedures.

Investigate the causes of incidents, document findings and seek resolution.

Make sure the escalation of any unresolved incidents has been completed according to agreed procedures.

Make sure security incidents have been documented and closed where appropriate, according to agreed procedures.

Manage the on-call rotation for the Information Protection team emergency response.

Key Skills / Qualifications needed for this role:

Comprehensive IT Security experience.

SME in managing data loss incidents.

Team lead / People management experience- Essential.

Ideally a technical degree and / or industry recognised qualification and demonstrable experience in Information Security (e.g. CISSP, CISA, CISM, CSX-P or GIAC or CEH Certification).

A sound understanding of British and International Security Standards (e.g. CIS security benchmarks, ISO/IEC 27001, NIST, CSC20) relevant UK and EU privacy legislation (especially Data Protection Act 2018 and EU GDPR) and the UK regulatory environment (e.g. ICO, FCA, PRA and CQC).

Experience working with Microsoft Office 365.

Excellent communication skills both orally and in writing and can present complex information to both technical and non-technical audiences.

Benefits

Our benefits are designed to make health happen for our people. Viva is our global wellbeing programme and includes all aspects of our health – from mental and physical, to financial, social and environmental wellbeing. We support flexible working and have a range of family friendly benefits.

Joining Bupa in this role you will receive the following benefits and more:

• 25 days holiday, increasing through length of service, with option to buy or sell

• Bupa health insurance as a benefit in kind

• An enhanced pension plan and life insurance

• Annual performance-based bonus

• Onsite gyms or local discounts where no onsite gym available

• Various other benefits and online discounts

Why Bupa?

We’re a health insurer and provider. With no shareholders, our customers are our focus. Our people are all driven by the same purpose – helping people live longer, healthier, happier lives and making a better world. We make health happen by being brave, caring and responsible in everything we do.

  • Centre for Disaster Protection

    3 weeks ago

    Central London, United Kingdom Centre for Disaster Protection Full time

    Communications Manager: Background to the Centre The Centre for Disaster Protection works to prevent disasters devastating lives, by helping people, countries, and organisations change how they plan and pay for disasters. We focus on disaster risk financing to help ensure that money and plans are in place before a disaster strikes, so that the poorest and...

  • Centre for Disaster Protection

    2 weeks ago

    Central London, United Kingdom Centre for Disaster Protection Full time

    Communications Manager: Background to the Centre The Centre for Disaster Protection works to prevent disasters devastating lives, by helping people, countries, and organisations change how they plan and pay for disasters. We focus on disaster risk financing to help ensure that money and plans are in place before a disaster strikes, so that the poorest and...

  • Information Assurance Consultant

    2 months ago

    London, United Kingdom Protection Group International Full time

    Here at PGI, we are currently recruiting for an **Information Assurance Consultant** who is keen to progress their career whilst also delivering a high level of service to our diverse client base. **Who are PGI?** We are global leaders in Cyber Security, Corporate Intelligence, and Training. We specialise in managing digital risks that could negatively...

  • Information Governance

    3 months ago

    London, United Kingdom Eden Brown Synergy Full time

    **Information Governance Manager & Data Protection Officer - Greater London** Eden Brown Synergy are working in partnership with a leading NHS Trust based in Greater London, one of the world-leading orthopaedic hospitals. We are seeking to appoint an experienced Information Governance Manager & Data Protection Officer on an interim basis. As a key member of...

  • Junior Information Assurance Consultant

    1 month ago

    London, United Kingdom Protection Group International Full time

    Here at PGI, we are currently recruiting for a **Junior** **Information Assurance Consultant** who is keen to progress their career whilst also delivering a high level of service to our diverse client base. **Who are PGI?** We are global leaders in Cyber Security, Corporate Intelligence, and Training. We specialise in managing digital risks that could...

  • Information Governance

    3 months ago

    London, United Kingdom Eden Brown Synergy Full time

    **Information Governance and Data Protection Officer** I am working with a Public Sector Organisation based in Barnet who are looking for an Information Governance and Data Protection Officer for 3 Months Initially. The role is full time, to start ASAP and paying up to £250 Umbrella per day. The role is in scope of IR35. *** **Job Purpose** - Act as a...

  • Protection Advisor

    3 months ago

    London, United Kingdom Secure Mortgages and Protection Ltd. Full time

    Secure Mortgages and Protection Ltd. (SMP) is a fully regulated, licensed and directly authorised company and has a strategic partnership in the UK with deVere, the world's largest IFA. SMP are now expanding across the UK and have opportunities for experienced, entrepreneurial-thinking Protection Advisers and Estate Planners who want to offer a wider range...

  • Information Security Consultant

    2 months ago

    London, United Kingdom PGI - Protection Group International Ltd Full time

    **Information Security Consultant** PGI is a global consultancy that helps organisations build digital resilience. We deploy our people to implement solutions on behalf of clients or to support them in developing their own capabilities. Our consultants help clients to ensure the confidentiality, integrity, and availability of their organisation's data and...

  • Information Protection Policy Officer

    3 months ago

    London, United Kingdom Public Sector Resourcing Full time

    **Information Protection Policy Officer - **Inside IR35** **Contract Term: Until 29/03/24** **Contracting Authority: The Foreign, Commonwealth & Development Office** **Location: Remote - occasional meetings in London** The Foreign & Commonwealth Office (FCO) and the Department for International Development (DfID) merged on 1 September 2020 to form the...

  • Information Governance

    3 months ago

    London, United Kingdom Data Communications Company Full time

    **The role**: **Information Governance & Data Protection Specialist** **Location - **London - Manchester - Nottingham - Hybrid working model. Competitive Salary plus benefits **The Role** This role will play an important part in supporting data protection and information governance compliance company-wide. As an experienced information management and...

  • Information Manager

    3 weeks ago

    London (Central), United Kingdom Triple S Recruitment Ltd Full time

    Information Manager - Rail - Blackfriars The Role: We believe that people come first. Joining us means joining one of the UK s largest multidisciplinary engineering and construction contractors, delivering a vast breadth of innovative projects, and offering endless opportunities to grow. We are now looking for an Information Manager to join our team who...

  • Strategic Communications Lead

    2 weeks ago

    Central London, United Kingdom Centre for Disaster Protection Full time

    Position Overview: Communications Manager The Centre for Disaster Protection is dedicated to mitigating the impact of disasters on vulnerable populations by enhancing disaster risk financing strategies. Our mission is to ensure that adequate resources and plans are established prior to crises, enabling better protection for those most at risk. We prioritize...

  • Information Assurance Consultant

    3 months ago

    London, United Kingdom PGI - Protection Group International Ltd Full time

    **Information Assurance Consultant** London or Bristol PGI is a global consultancy that helps organisations build digital resilience. We deploy our people to implement solutions on behalf of clients or to support them in developing their own capabilities. Our Information Assurance consultants help clients to ensure the confidentiality, integrity, and...

  • Strategic Communications Lead

    2 weeks ago

    Central London, United Kingdom Centre for Disaster Protection Full time

    Position Overview: Communications Manager The Centre for Disaster Protection is dedicated to mitigating the impact of disasters on vulnerable populations by transforming how entities prepare for and finance disaster scenarios. Our mission revolves around disaster risk financing, ensuring that resources and strategies are established prior to crises, thereby...

  • Data Protection Counsel

    3 weeks ago

    Central London, United Kingdom Taylor Root Full time

    An excellent opportunity to join a FTSE 100 multinational FMCG who have global operations within 53 countries. They are looking for a Data Protection Counsel, who will be dealing with some interesting and complex areas of privacy. In addition to this, you will provide support and advise on all aspects of data protection to their businesses based in the UK...

  • Data Protection Counsel

    3 weeks ago

    London (Central), United Kingdom Taylor Root Full time

    An excellent opportunity to join a FTSE 100 multinational FMCG who have global operations within 53 countries. They are looking for a Data Protection Counsel, who will be dealing with some interesting and complex areas of privacy. In addition to this, you will provide support and advise on all aspects of data protection to their businesses based in the UK...

  • Senior Information Security Consultant

    3 months ago

    London, United Kingdom PGI - Protection Group International Ltd Full time

    **Senior Information Security Consultant** PGI is a global consultancy that helps organisations build digital resilience. We deploy our people to implement solutions on behalf of clients or to support them in developing their own capabilities. Our consultants help clients to ensure the confidentiality, integrity, and availability of their organisation's...

  • Strategic Communications Lead

    2 weeks ago

    Central London, United Kingdom Centre for Disaster Protection Full time

    Position Overview: Communications Manager The Centre for Disaster Protection is dedicated to mitigating the impact of disasters on vulnerable populations by transforming how organizations and governments prepare for and finance disaster response. Our mission centers on disaster risk financing, ensuring that resources and plans are established before crises...

  • Data Protection Manager

    3 months ago

    London, United Kingdom Ogier Full time

    Key Responsibilities Develop and implement data protection policies and procedures in compliance with relevant data protection laws applicable to Ogier Conduct and support regular data protection audits and risk assessments to identify vulnerabilities and ensure compliance with data protection laws and policies Serve as the primary point of contact...

  • Information Governance

    3 months ago

    London, United Kingdom NHS Professionals Full time

    **Information Governance / Data Protection Act (NHS role)** This role is work from home 2 days per week / work on site 3 days per week (on site is mainly SE5 8AZ, with occasional visits to Bromley) Pay is c£31.27/hr + 25 days per year pro rata paid holiday (worth £4.41/hr) + NHSP pays for your employer's NI (worth ~£5.49) ==> £41.17/hr Duration is 4...