Bupa

Health insurance

ITRiskandControlManager

£64–80k London, United Kingdom; Manchester, United Kingdom FULL TIME Remote Friendly
Market Sentiment
HIGH DEMAND

Neural analysis suggests this role is
optimal for Mid candidates.

The Brief

“IT Risk and Control Manager at Bupa. Skills: IT risk, Controls, Risk management, Stakeholder management. Identify and assess technology risks. Assess information security risks”

Industry & Context.

Health insurance

What They're Looking For.

Must Have

Experience managing IT risk and controls in a regulated environment, Financial services experience, Good understanding of technology risks, Experience designing, testing or reviewing IT controls, Knowledge of security frameworks such as ISO 27001, NIST, Awareness of UK regulatory bodies (such as FCA, PRA, ICO or CQC), Communication skills, Confidence working with senior stakeholders, Ability to stay organised and focused

Nice to Have

IT audit experience, Assurance experience, Risk roles experience, CISM, CISA, CISSP

What You'll Do.

Identify and assess technology risks

Assess information security risks

Manage risks with strong controls

Design and improve controls

Oversee control testing

Lead plans to fix control issues

Improve risk management

Build relationships with senior stakeholders

Prepare reports on risks

Prepare reports on controls

Monitor control performance

Support incident planning

Respond to technology risks

Respond to service risks

Promote risk-aware culture

How You'll Work.

Team & Collaboration

Work closely with senior leaders; Build relationships with senior stakeholders; Work with business leaders

Communication Scope

Explain complex ideas simply

Process & Methodology

Track plans to fix control issues

Full Job Description

Job Description: ## **IT Risk and Control Manager** **Salary:** £64,000 - £79,900 (dependant on experience and location) **Location status:** Hybrid - about 2 days in the office **Location:** Angel Court, London/ Bupa Place, Manchester or other UK Locations **Role Type:** Permanent **Shift pattern:** Full -time - 37.5 hours pw **Number of Positions: 2** **We make health happen** At Bupa, we’re here to help people live longer, healthier, happier lives. That’s our purpose, and it shapes everything we do. As an **IT Risk & Control Manager**, you’ll play an important part in making this happen. You’ll help make sure our technology is safe, reliable and ready to support our customers and colleagues every day. With around 400 business applications across our UK insurance business—some critical to how we operate—you’ll help us manage risk in a way that keeps services running smoothly. This is a role where you’ll work closely with senior leaders across technology and the wider business. You’ll help them understand risk, make good decisions, and put the right controls in place. It’s a great opportunity to make a real impact while working across a wide range of technologies, including cloud and digital platforms. **Key Responsibilities** As an IT Risk & Control Manager, you’ll: * Help identify and assess technology and information security risks across the business * Make sure risks are clearly understood and managed with strong, practical controls * Support teams to design and improve controls that reduce risk and protect services * Oversee control testing and make sure any gaps are addressed * Lead and track plans to fix control issues and improve how we manage risk * Build strong relationships with senior stakeholders, including CIOs and business leaders * Prepare clear, simple reports on risks and controls for senior committees * Monitor risk levels and control performance through dashboards and regular updates * Support incident planning and help teams respond to technol

Free ATS check

Applying for this IT Risk and Control Manager role?

Most applicants get filtered before a human reads their resume. See if yours makes the cut.

How to Apply on Workday

  • Workday has a multi-step form — save your progress after every section.
  • "Apply With LinkedIn" can fail or lose data; manual entry is more reliable.
  • Watch for the "Submit for Review" final step — hitting "Save" alone does not submit.
  • Job requisition numbers are useful when following up with HR by email.

ANONYMOUS · UNFILTERED

What do employees actually say about Bupa?

Real rants from real employees. Read before you apply.

Read Company Rants →