Bupa UK
Group Senior IT Risk Manager
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Job Description
Group Senior IT Risk Manager
Location
London
Employment Type
Full time – 35 hours per week
Working Options
Hybrid & Flexible working options
Job Type
Permanent role
Salary
Circa £90,000 & Fantastic Benefits Package
Closing Date
Wednesday 19th August, 2026
We make health happen!
At Bupa, we're committed to helping people live longer, healthier, happier lives. As our business continues to evolve, technology plays an increasingly critical role in delivering trusted healthcare experiences for millions of our customers around the world.
We're looking for a Senior IT Risk Manager to help shape and strengthen our approach to technology risk, resilience, and governance across the Group. This is a highly visible leadership role within our Group Information Security Office, reporting to the Group Head of Cyber Governance, Risk & Compliance and working closely with the Group Director of Operational Resilience.
The successful candidate will lead the development and evolution of our Group-wide IT risk management framework, ensuring robust governance, effective controls, and a consistent approach to risk management across multiple business units. You'll have the opportunity to influence senior stakeholders across the business, helping ensure our technology environment remains secure, resilient, and aligned to our strategic ambitions.
How You’ll Help Us Make Health Happen
- Lead the development, implementation, and maintenance of the Group-wide IT risk management framework, Policy and Standards, ensuring alignment with business objectives, the Enterprise Risk Management Framework and regulatory requirements.
- Identify, assess, and monitor IT risks across all business units, collaborating with stakeholders to ensure risks are appropriately managed and mitigated.
- Design and support the implementation of controls and processes to manage IT resilience risks, including regular reviews of their effectiveness, along with related key risk indicators.
- Partner with Market Unit technology and Second Line teams to define and support their implementation of controls and processes to ensure the resilience of data centres critical to the delivery of our critical services.
- Work closely with the Group Director of Operational Resilience to ensure consistency in risk management practices and reporting.
- Facilitate risk assessments, including thematic and ad-hoc reviews, to identify emerging threats and vulnerabilities in the Group’s IT environment.
- Prepare and deliver clear, concise risk reports for senior management, regulatory, and board-level audiences.
- Champion a culture of risk awareness, providing training and guidance to business units on IT risk management best practices.
- Collaborate with cross-functional teams to assess the impact of new technologies, regulatory changes, and industry standards on the Group’s IT risk profile.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Skills & Experience Required For This Role
We're looking for an experienced and credible technology risk leader who combines strategic thinking with practical delivery.
- Significant experience in IT Risk, Technology Risk, Cyber Risk, Operational Resilience or a similar discipline gained within a large, complex organisation.
- Demonstratable experience designing, implementing and embedding risk frameworks, controls and governance processes at enterprise scale.
- Strong understanding of recognised frameworks such as ISO 31000, ISO 27002, NIST, COBIT and ITIL.
- The ability to translate complex technical risks into meaningful business insights and practical action plans.
- Exceptional collaboration and stakeholder management skills, with the confidence and credibility to influence senior leaders and challenge constructively where required.
- The ability to work independently whilst fostering strong cross-functional collaboration, proactively identifying risks, opportunities and solutions to deliver business objectives.
- Professional certifications such as CISSP, CISM or CRISC are highly desirable.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Benefits
Our benefits are designed to make health happen for our people. Viva is our global wellbeing programme and includes all aspects of our health – from mental and physical, to financial, social and environmental wellbeing. We support flexible working and have a range of family friendly benefits.
Joining Bupa in this role you will receive the following benefits and more:
- 25 days holiday, increasing through length of service, with option to buy or sell
- Car allowance
- Performance related bonus
- Bupa medical insurance
- An enhanced pension plan and life insurance
- Free health assessment
- Annual performance-based bonus
- Onsite gyms or local discounts where no onsite gym available
- Various other benefits and online discounts
Why Bupa?
We’re a health insurer and provider. With no shareholders, our customers are our focus. Our people are all driven by the same purpose – helping people live longer, healthier, happier lives and making a better world. We make health happen by being brave, caring and responsible in everything we do.
We encourage all of our people to “Be you at Bupa”, we champion diversity, and we understand the importance of our people representing the communities and customers we serve. That’s why we especially encourage applications from people with diverse backgrounds and experiences.
Bupa is a Level 2 Disability Confident Employer. This means we aim to offer an interview/assessment to every disabled applicant who meets the minimum criteria for the role. We’ll make sure you are treated fairly and offer reasonable adjustments as part of our recruitment process to anyone that needs them.
Time Type
Full time
Job Area
Locations:
Angel Court, London
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location