At Bupa, purpose meets possible. Join us and help shape a future where healthcare is more connected, more personal and more human.
We’re a global healthcare leader trusted by millions and committed to helping people to live longer, healthier, happier lives and making a better world. Healthcare is changing, and so are we. We’re investing in more clinics, better systems and smarter, more connected ways to help our customers. As we continue to expand our services and invest in innovation, you’ll help create a healthcare system that meets people where they are, responds to what they need and leaves them better than before. Here, your work has purpose, your voice matters and your future is full of possibility.
Just imagine the impact you could make.
Opportunity snapshot - Permanent Role
The Cyber Threat Intelligence (CTI) Manager leads Bupa's Cyber Threat Intelligence capability, delivering strategic, operational, and tactical intelligence to enable proactive cyber risk management and intelligence-led decision making across the organisation. The role is responsible for developing and maturing the CTI capability by integrating external and internal intelligence sources, identifying emerging threats, monitoring the evolving cyber threat landscape, and translating intelligence into actionable outcomes that strengthen Bupa's cyber resilience.
Responsibilities
- Define and execute Bupa's Cyber Threat Intelligence strategy aligned with organisational priorities, cyber security objectives and business risk.
- Develop and mature the CTI capability, operating model, governance framework and intelligence lifecycle.
- Build trusted relationships across Cyber Defence, Technology, Risk, Executive Leadership and external intelligence-sharing communities.Lead the collection, analysis and dissemination of strategic, operational and tactical cyber threat intelligence.
- Monitor the global cyber threat landscape to identify emerging threat actors, campaigns, vulnerabilities and attack trends relevant to Bupa.
- Produce actionable intelligence products including executive briefings, threat assessments and technical advisories. Drive intelligence engineering practices to improve the collection, enrichment, automation and operationalisation of cyber threat intelligence.
- Design and implement automated intelligence workflows using APIs, scripting, orchestration platforms and AI-assisted technologies.
- Integrate commercial, open-source and government intelligence feeds into enterprise security platforms including SIEM, SOAR, XDR and Threat Intelligence Platforms (TIPs).
- Partner with Security Engineering, Cloud and DevSecOps teams to embed threat intelligence into security controls and engineering processes.
- Maintain a working understanding of modern enterprise technologies including Microsoft Azure, AWS, Microsoft 365, Microsoft Entra ID, hybrid cloud, cloud-native applications, APIs and modern infrastructure.
- Apply knowledge of DevSecOps, CI/CD pipelines, software supply chain security and modern application architectures to identify emerging cyber risks.
- Maintain working knowledge of enterprise security technologies including Microsoft Sentinel, Microsoft Defender XDR, SIEM, SOAR, EDR, XDR, and Attack Surface Management (ASM).
- Apply industry frameworks including the Intelligence Lifecycle, MITRE ATT&CK, MITRE D3FEND, MITRE ATLAS, MITRE AttackFlow, Diamond Model and the NIST Cybersecurity Framework to strengthen threat-informed defence.
Requirements
- 10+ years' experience in Cyber Threat Intelligence, Cyber Defence, Security Operations, Incident Response or related cyber security disciplines.
- Demonstrated leadership experience in developing, managing and maturing enterprise cyber security capabilities, operating models and strategic roadmaps.
- Experience integrating Cyber Threat Intelligence across Security Operations, Threat Hunting, Detection Engineering, Vulnerability Management and Incident Response.
- Knowledge of modern enterprise technologies and architectures, including Microsoft Azure, AWS, GCP, Microsoft 365, Microsoft Entra ID, hybrid cloud environments, DevSecOps, cloud-native applications and software supply chain security.
- Knowledge of Artificial Intelligence (AI) including agentic transformation, Machine Learning (ML), Large Language Models (LLMs), AI security risks and AI-assisted cyber defence.
- Experience with intelligence engineering, automation, scripting (e.g. PowerShell or Python), API integrations and workflow orchestration.
- Relevant certifications in Cyber Threat Intelligence, Incident Response or Threat Hunting (e.g. SANS FOR578, FOR508, CREST CTA or equivalent).
- CISSP, CISM or equivalent cyber security leadership certification.
Why you’ll love it?
At Bupa, our purpose is to help people live longer, healthier, happier lives and make a better world, and we know this starts with delivering our purpose for our people.
Our wellbeing program Viva has been designed to help you to live a healthy and happy life. It includes access to health & general insurance discounts, information and education sessions, and preventative healthcare screening such as annual health assessments and skin checks. Through Viva you have access to a range of benefits that will help you to maintain your physical, mental, social, digital, environmental and financial wellbeing. As well as a competitive salary, a range of Bupa benefits and flexible working, you’ll be challenged and encouraged to innovate.
If this sounds exciting, we’d love to hear from you. Let’s shape the future of healthcare, together.
At Bupa your wellbeing, identity, and personal story are respected and valued. We are continuing to build teams that reflect the diversity of the communities we serve. Bupa is committed to providing equal opportunities and fostering a workplace and environment that is free of discrimination, bullying and harassment.
We actively encourage applicants from all backgrounds and experiences, including Aboriginal and Torres Strait Islander peoples, veterans, people with disabilities, and LGBTQIA+ applicants.
We are dedicated to removing barriers to participation. If you need any reasonable adjustments during the recruitment process, or if you’d like to discuss how this role can be flexible for you, please let us know so we can support your participation on an equitable basis.
