Group Senior IT Risk Manager

Job Description:

Group Senior IT Risk Manager

London

Full time – 35 hours per week

Hybrid & Flexible working options

Permanent role

Salary circa £90,000 & fantastic benefits package

Closing date for all applications is Wednesday 19th August, 2026

We make health happen!

At Bupa, we're committed to helping people live longer, healthier, happier lives. As our business continues to evolve, technology plays an increasingly critical role in delivering trusted healthcare experiences for millions of our customers around the world.

We're looking for a Senior IT Risk Manager to help shape and strengthen our approach to technology risk, resilience, and governance across the Group.  This is a highly visible leadership role within our Group Information Security Office, reporting to the Group Head of Cyber Governance, Risk & Compliance and working closely with the Group Director of Operational Resilience. 

The successful candidate will lead the development and evolution of our Group-wide IT risk management framework, ensuring robust governance, effective controls, and a consistent approach to risk management across multiple business units.  You'll have the opportunity to influence senior stakeholders across the business, helping ensure our technology environment remains secure, resilient, and aligned to our strategic ambitions

How you’ll help us make health happen:

• Lead the development, implementation, and maintenance of the Group-wide IT risk management framework, Policy and Standards, ensuring alignment with business objectives, the Enterprise Risk Management Framework and regulatory requirements.

• Identify, assess, and monitor IT risks across all business units, collaborating with stakeholders to ensure risks are appropriately managed and mitigated.

• Design and support the implementation of controls and processes to manage IT resilience risks, including regular reviews of their effectiveness, along with related key risk indicators.

• Partner with Market Unit technology and Second Line teams to define and support their implementation of controls and processes to ensure the resilience of data centres critical to the delivery of our critical services.

• Work closely with the Group Director of Operational Resilience to ensure consistency in risk management practices and reporting.

• Facilitate risk assessments, including thematic and ad-hoc reviews, to identify emerging threats and vulnerabilities in the Group’s IT environment.

• Prepare and deliver clear, concise risk reports for senior management, regulatory, and board-level audiences.

• Champion a culture of risk awareness, providing training and guidance to business units on IT risk management best practices.

• Collaborate with cross-functional teams to assess the impact of new technologies, regulatory changes, and industry standards on the Group’s IT risk profile

Skills & experience required for this role:

We're looking for an experienced and credible technology risk leader who combines strategic thinking with practical delivery.

• Significant experience in IT Risk, Technology Risk, Cyber Risk, Operational Resilience or a similar discipline gained within a large, complex organisation.

• Demonstratable experience designing, implementing and embedding risk frameworks, controls and governance processes at enterprise scale.

• Strong understanding of recognised frameworks such as ISO 31000, ISO 27002, NIST, COBIT and ITIL.

• The ability to translate complex technical risks into meaningful business insights and practical action plans.

• Exceptional collaboration and stakeholder management skills, with the confidence and credibility to influence senior leaders and challenge constructively where required.

• The ability to work independently whilst fostering strong cross-functional collaboration, proactively identifying risks, opportunities and solutions to deliver business objectives.

• Professional certifications such as CISSP, CISM or CRISC are highly desirable

Benefits

Our benefits are designed to make health happen for our people. Viva is our global wellbeing programme and includes all aspects of our health – from mental and physical, to financial, social and environmental wellbeing. We support flexible working and have a range of family friendly benefits.

Joining Bupa in this role you will receive the following benefits and more:

• 25 days holiday, increasing through length of service, with option to buy or sell

• Car allowance

• Performance related bonus

• Bupa medical insurance

• An enhanced pension plan and life insurance

• Free health assessment

• Annual performance-based bonus

• Onsite gyms or local discounts where no onsite gym available

• Various other benefits and online discounts

Why Bupa?

We’re a health insurer and provider. With no shareholders, our customers are our focus. Our people are all driven by the same purpose – helping people live longer, healthier, happier lives and making a better world. We make health happen by being brave, caring and responsible in everything we do.

We encourage all of our people to “Be you at Bupa”, we champion diversity, and we understand the importance of our people representing the communities and customers we serve.  That’s why we especially encourage applications from people with diverse backgrounds and experiences.

Bupa is a Level 2 Disability Confident Employer. This means we aim to offer an interview/assessment to every disabled applicant who meets the minimum criteria for the role. We’ll make sure you are treated fairly and offer reasonable adjustments as part of our recruitment process to anyone that needs them. 

Time Type:

Job Area:

Locations: