Job Description:
Operational Resilience Senior IT Risk Manager
London
Permanent
Full time & Hybrid
Salary - Competitive DOE & Attractive benefits package
The closing date for all applications is Tuesday 27th January, 2026
We make health happen!
At Bupa, we’re here to help people live longer, healthier, happier lives – and make a better world. As an Operational Resilience Senior IT Risk Manager, you’ll work closely with the Group Head of IT & Information Security Risk playing a vital role in protecting the technology that underpins our critical services.
You’ll play a key role in identifying, assessing, and managing IT risks across the Group, while implementing robust frameworks and controls to ensure effective risk management. Ultimately, your work will help us stay resilient, safeguard customer data, and ensure we can deliver care when it matters most.
How you'll help us make health happen:
1. Develop and maintain a Group-wide IT risk management framework aligned with business goals and regulations.
2. Identify, assess, and monitor IT risks across all business units, ensuring effective mitigation.
3. Design and implement controls to manage IT resilience risks, reviewing effectiveness regularly.
4. Partner with technology teams to strengthen resilience of data centres and critical services.
5. Work closely with the Group Head of IT and Information Security Risk to ensure consistency in risk management practices and reporting
6. Help design technical groupwide severe but plausible exercises to test ability to meet Impact tolerances and SLA’s across important business services / critical operations and critical internal services
7. Prepare and deliver clear, concise risk reports for senior management, regulatory, and board-level audiences.
8. Champion a culture of risk awareness, providing training and guidance to business units on IT risk management best practices.
9. Collaborate with cross-functional teams to assess the impact of new technologies, regulatory changes, and industry standards on the Group’s IT risk profile
10. Support and guide Market Units in identifying, prioritising and sequencing for recovery their critical internal technology services.
11. Partner with Market Unit technology teams in ensuring resilience requirements are incorporated into their incident, problem and change processes.
Skills & Experience needed for this role:
12. Proven experience in IT risk management, Operational Resilience, or related fields.
13. Strong understanding of IT risk frameworks, assessment methodologies, and regulations.
14. Experience implementing and managing risk controls and frameworks in large organisations.
15. Excellent communication, stakeholder management and influencing skills.
16. Ability to translate complex technical risks into actionable recommendations for non-technical audiences.
17. Professional certifications (CISSP, CISM, CRISC) are highly desirable.
18. Strong background with frameworks including ISO2330, ISO31000, ISO27002, NIST, COBIT, ITIL
19. Strategic thinker with proactive problem-solving skills.
Benefits
Our benefits are designed to make health happen for our people. Viva is our global wellbeing programme and includes all aspects of our health – from mental and physical, to financial, social and environmental wellbeing. We support flexible working and have a range of family friendly benefits.
Joining Bupa in this role you will receive the following benefits and more:
20. 25 days holiday per year.
21. Management bonus scheme
22. Car allowance
23. Access to a range of services to support your physical and mental wellbeing
24. Workplace pension
25. Online discounts covering your everyday shopping, entertainment, eating out and more.
Why Bupa?
We’re a health insurer and provider. With no shareholders, our customers are our focus. Our people are all driven by the same purpose – helping people live longer, healthier, happier lives and making a better world. We make health happen by being brave, caring and responsible in everything we do.