IT Risk and Control Manager

Responsibilities

As an IT Risk & Control Manager, you will:

• Help identify and assess technology and information security risks across the business.
• Ensure risks are clearly understood and managed with strong, practical controls.
• Support teams to design and improve controls that reduce risk and protect services.
• Oversee control testing and ensure any gaps are addressed.
• Lead and track plans to fix control issues and improve risk management processes.
• Build strong relationships with senior stakeholders including CIOs and business leaders.
• Prepare clear, simple reports on risks and controls for senior committees.
• Monitor risk levels and control performance through dashboards and regular updates.
• Support incident planning and help teams respond to technology or service risks.
• Promote a strong risk‑aware culture by providing guidance and training when needed.

Qualifications

• Experience managing IT risk and controls in a regulated environment; financial services experience is essential.
• Good understanding of technology risks, including cloud services and modern IT environments.
• Experience designing, testing or reviewing IT controls.
• Knowledge of security frameworks such as ISO 27001, NIST or similar.
• Awareness of UK regulatory bodies (e.g., FCA, PRA, ICO, CQC).
• Strong communication skills, with the ability to explain complex ideas in a simple way.
• Confidence working with senior stakeholders and influencing decisions.
• Experience in IT audit, assurance or risk roles; qualifications such as CISM, CISA or CISSP are helpful but not essential.
• Ability to stay organised and focused, even when working to tight deadlines.

Benefits

• 25 days holiday (increasing with length of service) with the option to buy or sell.
• Bupa health insurance as a benefit in kind.
• An enhanced pension plan and life insurance.
• Onsite gyms or local discounts where no onsite gym is available.
• Various other benefits and online discounts.

Bupa is a Level 2 Disability Confident Employer. We aim to offer an interview/assessment to every disabled applicant who meets the minimum criteria. We will treat applicants fairly and provide reasonable adjustments as part of our recruitment process.

#J-18808-Ljbffr…