> Markdown version of [/jobs/ext/2405935-information-security-and-compliance-risk-manager](https://www.wearedevelopers.com/jobs/ext/2405935-information-security-and-compliance-risk-manager). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Information Security and Compliance Risk Manager - **Company:** Bupa - **Location:** Salford, UK - **Salary:** £64,000.0 - **Contract:** Permanent contract - **Skills:** Cloud Computing Security, Cyber Security, PCI Data Security Standards, Information Security Management System, CIS Benchmarks, ISO/IEC 27002 - **Published:** August 24, 2026 - **Apply:** https://bupa.wd3.myworkdayjobs.com/EXT_CAREER/job/Salford-Quays/Information-Security-and-Compliance-Risk-Manager_R1226319 ## About the Role To be successful as an Information Security Risk & Compliance Manager, you'll bring: * Experience managing an Information Security Management System (ISMS), ideally including ISO27001 certification and audit activities. * Strong knowledge of information security governance, risk and compliance practices. * Experience delivering information security audits, assurance programmes or IT control reviews. * A solid understanding of recognised security frameworks and standards, including ISO27001, ISO27002, NIST, CIS Controls and PCI DSS. * Knowledge of UK regulatory environments, including organisations such as the FCA, PRA and ICO. * The ability to build credibility and influence stakeholders at all levels. * Strong analytical, reporting and communication skills, with the ability to explain complex security concepts clearly to both technical and non-technical audiences. * Experience developing management information, dashboards and committee reporting. * High levels of integrity, professionalism and sound judgement when handling sensitive information. * Experience within a regulated industry, particularly financial services, would be beneficial but is not essential. * An understanding of cloud security risks and controls. * The ability to manage competing priorities and deliver against deadlines in a fast-paced environment. ## Description Information Security Risk & Compliance Manager, We're looking for an Information Security Risk & Compliance Manager to join our Technology Governance, Risk & Control team. This is an exciting opportunity to influence how information security risk is managed across the organisation, helping to strengthen security maturity, maintain compliance with recognised industry standards, and support regulatory requirements. Working closely with senior stakeholders across the business, you'll be at the centre of driving effective governance, risk management and compliance activities. You'll help ensure our Information Security Management System (ISMS) remains aligned to best practice, support regulatory readiness, and contribute to a culture where security risk management is embedded into everyday decision-making. How you'll help us make health happen: As an Information Security Risk & Compliance Manager, you will: * Lead the management and continuous improvement of Bupa's ISO27001 Information Security Management System (ISMS). * Act as the primary liaison for external ISO27001 audits and certification activities. * Coordinate and oversee information security compliance, assurance and control review activities. * Monitor and report on remediation plans, control effectiveness and compliance obligations. * Support risk management activities across technology and information security programmes and strategic initiatives. * Produce high-quality reporting and management information for governance forums, executive committees and risk committees. * Build strong relationships with stakeholders across the business to drive effective security governance. * Challenge and support the identification, prioritisation and escalation of information security risks. * Contribute to integrated assurance activities and track risk remediation commitments. * Support responses to regulatory requirements and external standards, including engagement with bodies such as the FCA and PRA. * Promote a customer-focused approach, ensuring good customer and regulatory outcomes remain central to decision-making. ## Related Videos - [One Pipeline, Three Regulator - SBOM Compliance for the Developer](https://www.wearedevelopers.com/videos/100169-one-pipeline-three-regulator-sbom-compliance-for-the-developer) - [A practical guide to writing secure Dockerfiles](https://www.wearedevelopers.com/videos/109-a-practical-guide-to-writing-secure-dockerfiles) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [OPA for the cloud natives](https://www.wearedevelopers.com/videos/713-opa-for-the-cloud-natives) - [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large) ## Related Articles - [IT Salaries in UK](https://www.wearedevelopers.com/magazine/288-it-salaries-in-uk) - [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [UK Business Culture and Etiquette](https://www.wearedevelopers.com/magazine/326-uk-business-culture-and-etiquette) - [Best Companies to work for in London: Top 25 Companies in 2023](https://www.wearedevelopers.com/magazine/187-best-companies-to-work-for-in-london-top-25-companies-in-2023) - [Guide for Expats Living in the UK](https://www.wearedevelopers.com/magazine/355-guide-for-expats-living-in-the-uk)