Information Security and Compliance Risk Manager

Bupa; Leeds; On-site; GBP 58,000 - 70,000; Full time

Benefits offered by this job

10% Bonus

Job summary

Bupa is hiring an Information Security Risk & Compliance Manager to lead the ISMS and drive governance across technology and security programs. Based in Leeds or London, the role focusses on improving security maturity, ensuring compliance with ISO27001 and other standards, and supporting regulatory readiness.

You will work with senior stakeholders to manage risk, produce governance reports, and ensure security controls align with business priorities, customer needs and regulatory

Qualifications

• Experience managing an Information Security Management System (ISMS) and ISO27001.
• Strong knowledge of information security governance, risk and compliance.
• Experience delivering information security audits and assurance programmes.
• Understanding security frameworks: ISO27001/27002, NIST, CIS, PCI DSS.
• Knowledge of UK regulatory environments (FCA, PRA, ICO).
• Ability to influence stakeholders and communicate complex concepts.
• Experience in reporting and dashboards for governance.
• Understanding cloud security risks and controls.
• Ability to manage competing priorities in fast-paced environments.
• Experience in regulated industries is beneficial.

Responsibilities

• Lead the management and continuous improvement of ISO27001 ISMS.
• Act as primary liaison for ISO27001 audits and certifications.
• Coordinate information security compliance and control reviews.
• Monitor remediation plans and control effectiveness.
• Support risk management across technology and information security programmes.
• Produce reporting for governance forums and risk committees.
• Engage with FCA, PRA and ICO for regulatory readiness.
• Promote customer-focused decision-making.

Skills

ISMS management

Audit coordination

Governance & compliance

Stakeholder management

Regulatory knowledge

ISO27001/27002 knowledge

Cloud security understanding

Job description

Job Description:

Information Security Risk & Compliance Manager
Salary: from £64,000 (Negotiable depending on experience)
Location: London (EC2R 7HJ), Leeds(LS5 3BF), Salford (M50 3SP)
Permanent
Shift pattern: Full time, 37.5 hours per week
Role specific benefits: 10% Bonus

We make health happen

At Bupa, our purpose is simple: helping people live longer, healthier, happier lives and making a better world. As an organisation focused on health and care, information security plays a vital role in protecting our customers, colleagues and business operations.

We’re looking for an Information Security Risk & Compliance Manager to join our Technology Governance, Risk & Control team. This is an exciting opportunity to influence how information security risk is managed across the organisation, helping to strengthen security maturity, maintain compliance with recognised industry standards, and support regulatory requirements.

Working closely with senior stakeholders across the business, you’ll be at the centre of driving effective governance, risk management and compliance activities. You’ll help ensure our Information Security Management System (ISMS) remains aligned to best practice, support regulatory readiness, and contribute to a culture where security risk management is embedded into everyday decision-making.

How you’ll help us make health happen:

As an Information Security Risk & Compliance Manager, you will:

• Lead the management and continuous improvement of Bupa’s ISO27001 Information Security Management System (ISMS).

• Act as the primary liaison for external ISO27001 audits and certification activities.

• Coordinate and oversee information security compliance, assurance and control review activities.

• Monitor and report on remediation plans, control effectiveness and compliance obligations.

• Support risk management activities across technology and information security programmes and strategic initiatives.

• Produce high-quality reporting and management information for governance forums, executive committees and risk committees.

• Build strong relationships with stakeholders across the business to drive effective security governance.

• Challenge and support the identification, prioritisation and escalation of information security risks.

• Contribute to integrated assurance activities and track risk remediation commitments.

• Support responses to regulatory requirements and external standards, including engagement with bodies such as the FCA and PRA.

• Promote a customer-focused approach, ensuring good customer and regulatory outcomes remain central to decision-making.

Key Skills & Experience

To be successful as an Information Security Risk & Compliance Manager, you’ll bring:

• Experience managing an Information Security Management System (ISMS), ideally including ISO27001 certification and audit activities.

• Strong knowledge of information security governance, risk and compliance practices.

• Experience delivering information security audits, assurance programmes or IT control reviews.

• A solid understanding of recognised security frameworks and standards, including ISO27001, ISO27002, NIST, CIS Controls and PCI DSS.

• Knowledge of UK regulatory environments, including organisations such as the FCA, PRA and ICO.

• The ability to build credibility and influence stakeholders at all levels.

• Strong analytical, reporting and communication skills, with the ability to explain complex security concepts clearly to both technical and non-technical audiences.

• Experience developing management information, dashboards and committee reporting.

• High levels of integrity, professionalism and sound judgement when handling sensitive information.

• Experience within a regulated industry, particularly financial services, would be beneficial but is not essential.

• An understanding of cloud security risks and controls.

• The ability to manage competing priorities and deliver against deadlines in a fast-paced environment.

Benefits

Our benefits are designed to make health happen for our people. Viva is our global wellbeing programme and includes all aspects of our health – from mental and physical, to financial, social and environmental wellbeing. We support flexible working and have a range of family friendly benefits.

Joining Bupa in this role you will receive the following benefits and more:

• Annual performance bonus

• Private medical insurance

• Generous pension contribution

• 25 days holiday, increasing with service

• Access to our Viva wellbeing programme

• Flexible and hybrid working opportunities

• Access to discounts and wellbeing support services

• Enhanced family friendly benefits

Why Bupa

We’re a health insurer and provider. With no shareholders, our customers are our focus. Our people are all driven by the same purpose – helping people live longer, healthier, happier lives and making a better world. We make health happen by being brave, caring and responsible in everything we do.

We encourage all of our people to “Be you at Bupa”. We champion diversity and understand the importance of our people representing the communities and customers we serve. That’s why we especially encourage applications from people with diverse backgrounds and experiences.

Bupa is a Level 2 Disability Confident Employer. This means we aim to offer an interview/assessment to every disabled applicant who meets the minimum criteria for the role. We’ll make sure you are treated fairly and offer reasonable adjustments as part of our recruitment process to anyone who needs them.

If you require information regarding this role in an alternative format, please email: [e-mail]

Time Type:

Full time

Job Area:

Legal, Risk & Audit

Locations:

Angel Court, London, Bupa Place, Kirkstall Forge