Head of Tech GRC & Compliance

BUPA; City Of London; Hybrid; GBP 150,000 - 200,000; Full time

Job summary

A leading health insurance provider in London is looking for a Head of Technology Governance, Reporting and Compliance to drive standards and manage technology and cyber risk. This high-impact role requires senior leadership in governance and risk analysis, offering an opportunity to influence health outcomes. Candidates should have experience in regulated environments and a strong grasp of frameworks such as ISO 27001, NIST, and COBIT. The position offers hybrid working options and competitive benefits.

Benefits

25 days holiday plus options to buy or sell

Enhanced parental leave

Company-matched pension scheme

Performance-based bonus

Private medical insurance

Health assessments and wellbeing services

Discounts on Bupa products and services

Qualifications

• Proven senior leadership experience in technology/cyber risk governance.
• Ability to influence stakeholders effectively at all levels.
• Strong communication skills for board-level presentations.
• Experience with frameworks such as ISO, NIST, COBIT.
• Experience in regulated environments, preferably financial services.

Responsibilities

• Lead governance and assurance for technology and cyber risk.
• Create risk reporting and dashboard materials for executives.
• Ensure compliance with internal policies and external regulations.
• Aggregate risk reporting from various business units.
• Coach teams on converting regulatory updates into actionable insights.

Skills

Senior leadership in technology/cyber risk governance

Excellent written communication

Advanced analysis of risk and control metrics

Hands-on knowledge of frameworks and standards

Experience in regulated environments

Education

CISSP, CISA, CISM, GRCP

ISO 27001 Lead Implementer/Auditor

Tools

ISO 27001

NIST

COBIT

ITIL

PCI DSS

CIS

OWASP

Job description

A leading health insurance provider in London is looking for a Head of Technology Governance, Reporting and Compliance to drive standards and manage technology and cyber risk. This high-impact role requires senior leadership in governance and risk analysis, offering an opportunity to influence health outcomes. Candidates should have experience in regulated environments and a strong grasp of frameworks such as ISO 27001, NIST, and COBIT. The position offers hybrid working options and competitive benefits.