IT Risk Manager

Experteer Overview As IT Risk Manager at Bupa, you will identify and assess technology and information security risks across the business, collaborating with senior leaders. You will design and improve controls to reduce risk and ensure services run reliably. You will oversee testing, remediation plans and risk reporting to senior committees, while promoting a risk-aware culture. The role focuses on cloud and digital platforms, enabling safe technology to support customers and colleagues. Pay / Benefits * Identify and assess technology and information security risks across the business * Ensure risks are understood and managed with strong controls * Support teams to design and improve IT controls * Oversee control testing and address gaps * Lead and track remediation plans to improve risk management * Build relationships with senior stakeholders including CIOs * Prepare clear risk and control reports for senior committees * Monitor risk levels with dashboards and updates * Support incident planning and response to technology or service risks * Promote risk-aware culture through guidance and training Tasks * Experience managing IT risk and controls in a regulated environment (financial services experience is essential) * Understanding of technology risks including cloud services and modern IT environments * Experience designing, testing or reviewing IT controls * Knowledge of security frameworks such as ISO 27001, NIST or similar * Awareness of UK regulatory bodies (FCA, PRA, ICO or CQC) * Strong communication skills with ability to explain complex ideas simply * Confidence working with senior stakeholders and influencing decisions * Experience in IT audit, assurance or risk roles (CISM, CISA or CISSP helpful but not essential) * Ability to stay organized and focused under tight deadlines Key requirements * 25 days holiday * Bupa health insurance * enhanced pension plan * life insurance * onsite gyms or local discounts * online discounts

incident planning and response to technology or service risks * Promote risk-aware culture through guidance and training Tasks * Experience managing IT risk and controls in a regulated environment (financial services experience is essential) * Understanding of technology risks including cloud services and modern IT environments * Experience designing, testing or reviewing IT controls * Knowledge of security frameworks such as ISO 27001, NIST or similar * Awareness of UK regulatory bodies (FCA, PRA, ICO or CQC) * Strong communication skills with ability to explain complex ideas simply * Confidence working with senior stakeholders and influencing decisions * Experience in IT audit, assurance or risk roles (CISM, CISA or CISSP helpful but not essential) * Ability to stay organized and focused under tight deadlines Key requirements * 25 days holiday * Bupa health insurance * enhanced pension plan * life insurance * onsite gyms or local discounts * online discounts