Help identify and assess technology and information security risks across the business
Make sure risks are clearly understood and managed with strong, practical controls
Support teams to design and improve controls that reduce risk and protect services
Oversee control testing and make sure any gaps are addressed
Lead and track plans to fix control issues and improve how we manage risk
Build strong relationships with senior stakeholders, including CIOs and business leaders
Prepare clear, simple reports on risks and controls for senior committees
Monitor risk levels and control performance through dashboards and regular updates
Support incident planning and help teams respond to technology or service risks
Promote a strong risk-aware culture by offering guidance and training where needed
Requirements
We're looking for someone who is confident, collaborative and ready to make a difference.
You'll bring:
Experience managing IT risk and controls in a regulated environment (financial services experience is essential)
A good understanding of technology risks, including cloud services and modern IT environments
Experience designing, testing or reviewing IT controls
Knowledge of security frameworks such as ISO 27001, NIST or similar
Awareness of UK regulatory bodies (such as FCA, PRA, ICO or CQC)
Strong communication skills, with the ability to explain complex ideas in a simple way
Confidence working with senior stakeholders and influencing decisions
Experience in IT audit, assurance or risk roles (qualifications like CISM, CISA or CISSP are helpful but not essential)
The ability to stay organised and focused, even when working to tight deadlines
Benefits
Our benefits are designed to make health happen for our people. Viva is our global wellbeing programme and includes all aspects of our health - from mental and physical, to financial, social and environmental wellbeing. We support flexible working and have a range of family friendly benefits.Joining Bupa in this role you will receive the following benefits and more:25 days holiday, increasing through length of service, with option to buy or sellBupa health insurance as a benefit in kindAn enhanced pension plan and life insuranceOnsite gyms or local discounts where no onsite gym availableVarious other benefits and online discountsWhy BupaWe're a health insurer and provider. With no shareholders, our customers are our focus. Our people are all driven by the same purpose - helping people live longer, healthier, happier lives and making a better world. We make health happen by being brave, caring and responsible in everything we do.We encourage all of our people to "Be you at Bupa", we champion diversity, and we understand the importance of our people representing the communities and customers we serve. That's why we especially encourage applications from people with diverse backgrounds and experiences.Time Type:Full time Job Area:Legal, Risk & Audit Locations:Angel Court, London, Bupa PlaceHealth insuranceFlexible schedule
Additional Information
Job Description:
IT Risk and Control Manager
Salary: £64,000 - £79,900 (dependant on experience and location)
Location status: Hybrid - about 2 days in the office
Location: Angel Court, London/ Bupa Place, Manchester or other UK Locations
Role Type: Permanent
Shift pattern: Full -time - 37.5 hours pw
Number of Positions: 2
We make health happen
At Bupa, we're here to help people live longer, healthier, happier lives. That's our purpose, and it shapes everything we do.
As an IT Risk & Control Manager , you'll play an important part in making this happen. You'll help make sure our technology is safe, reliable and ready to support our customers and colleagues every day. With around 400 business applications across our UK insurance business-some critical to how we operate-you'll help us manage risk in a way that keeps services running smoothly.
This is a role where you'll work closely with senior leaders across technology and the wider business. You'll help them understand risk, make good decisions, and put the right controls in place. It's a great opportunity to make a real impact while working across a wide range of technologies, including cloud and digital platforms.