Information Security and Compliance Risk Manager

Information Security Risk & Compliance Manager, We’re looking for an Information Security Risk & Compliance Manager to join our Technology Governance, Risk & Control team. This is an exciting opportunity to influence how information security risk is managed across the organisation, helping to strengthen security maturity, maintain compliance with recognised industry standards, and support regulatory requirements.

Working closely with senior stakeholders across the business, you’ll be at the centre of driving effective governance, risk management and compliance activities. You’ll help ensure our Information Security Management System (ISMS) remains aligned to best practice, support regulatory readiness, and contribute to a culture where security risk management is embedded into everyday decision-making.

How you’ll help us make health happen:

As an Information Security Risk & Compliance Manager, you will:

• Lead the management and continuous improvement of Bupa’s ISO27001 Information Security Management System (ISMS).
• Act as the primary liaison for external ISO27001 audits and certification activities.
• Coordinate and oversee information security compliance, assurance and control review activities.
• Monitor and report on remediation plans, control effectiveness and compliance obligations.
• Support risk management activities across technology and information security programmes and strategic initiatives.
• Produce high-quality reporting and management information for governance forums, executive committees and risk committees.
• Build strong relationships with stakeholders across the business to drive effective security governance.
• Challenge and support the identification, prioritisation and escalation of information security risks.
• Contribute to integrated assurance activities and track risk remediation commitments.
• Support responses to regulatory requirements and external standards, including engagement with bodies such as the FCA and PRA.
• Promote a customer-focused approach, ensuring good customer and regulatory outcomes remain central to decision-making.

To be successful as an Information Security Risk & Compliance Manager, you’ll bring:

• Experience managing an Information Security Management System (ISMS), ideally including ISO27001 certification and audit activities.
• Strong knowledge of information security governance, risk and compliance practices.
• Experience delivering information security audits, assurance programmes or IT control reviews.
• A solid understanding of recognised security frameworks and standards, including ISO27001, ISO27002, NIST, CIS Controls and PCI DSS.
• Knowledge of UK regulatory environments, including organisations such as the FCA, PRA and ICO.
• The ability to build credibility and influence stakeholders at all levels.
• Strong analytical, reporting and communication skills, with the ability to explain complex security concepts clearly to both technical and non-technical audiences.
• Experience developing management information, dashboards and committee reporting.
• High levels of integrity, professionalism and sound judgement when handling sensitive information.
• Experience within a regulated industry, particularly financial services, would be beneficial but is not essential.
• An understanding of cloud security risks and controls.
• The ability to manage competing priorities and deliver against deadlines in a fast-paced environment.

Pulled from the full job description

• Referral programme
• Employee mentoring programme
• Gym membership
• Additional leave
• Private dental insurance
• Company pension
• Private medical insurance, Our benefits are designed to make health happen for our people. Viva is our global wellbeing programme and includes all aspects of our health - from mental and physical, to financial, social and environmental wellbeing. We support flexible working and have a range of family friendly benefits.

Joining Bupa in this role you will receive the following benefits and more:

• Annual performance bonus
• Private medical insurance
• Generous pension contribution
• 25 days holiday, increasing with service
• Access to our Viva wellbeing programme
• Flexible and hybrid working opportunities
• Access to discounts and wellbeing support services
• Enhanced family friendly benefits, Angel Court, London, Bupa Place, Kirkstall Forge Health & wellbeing programme, Employee mentoring programme, Referral programme, Gym membership, Company pension, Free flu jabs, Canteen, Private dental insurance, Financial planning services, Cycle to work scheme, Paid volunteer time, Private medical insurance, Additional leave

We’re a health insurer and provider. With no shareholders, our customers are our focus. Our people are all driven by the same purpose - helping people live longer, healthier, happier lives and making a better world. We make health happen by being brave, caring and responsible in everything we do.

We encourage all of our people to “Be you at Bupa”. We champion diversity and understand the importance of our people representing the communities and customers we serve. That’s why we especially encourage applications from people with diverse backgrounds and experiences.

Bupa is a Level 2 Disability Confident Employer. This means we aim to offer an interview/assessment to every disabled applicant who meets the minimum criteria for the role. We’ll make sure you are treated fairly and offer reasonable adjustments as part of our recruitment process to anyone who needs them.