Tom Whipp

Ethics-driven and commercially focused technology-risk executive with over 20 years’ experience helping boards and regulators gain confidence in cyber resilience, governance and operational-risk management.

I specialise in leading high-impact transformations—rebuilding both first and second-line risk capability, restoring regulator assurance, and embedding pragmatic frameworks that improve decision-making and risk culture across complex, multi-entity organisations.

Recent achievements include:

• Building a high-performing Technology Risk function cited positively in a Skilled Person’s review (Bupa Insurance, 2020).
• Delivering ISO 27001 certification and 80%+ reduction in incidents while creating a new security capability from zero base (Charles Taylor PLC).
• Designing and implementing enterprise-risk frameworks for FCA-regulated entities following supervisory intervention (Oval Ltd).
• I’m comfortable operating at Board, ExCo and regulator interface levels, translating technical risk into clear strategic outcomes.

Available immediately for interim or contract roles in:

• Technology-Risk Leadership
• Cyber Governance & Oversight
• Risk-Culture Transformation
• Regulatory Remediation & Assurance
• Crisis Management & Stabilisation

Based in the UK – open to hybrid or remote engagements with particular experience within Insurance, Financial Services and adjacent regulated sectors.