IT Security Manager - Insurance - City

IT Security Manager

Cyber, Cloud, Azure

Insurance

City, London/ Hybrid (3 days per week in the office)

Permanent

Circa £95,000 per annum + benefits + bonus

My client is a specialist insurance provider and they are looking for an IT Security Manager ideally with previous Insurance/ Financial Services experience to join them on permanent basis.

It's a fantastic opportunity to join the market leader in Cyber and play a major part in the technology team providing bespoke systems that give my client their competitive advantage in this dynamic marketplace.

You will be working with skilled teams across the business, focusing on initiatives and opportunities, using cloud technologies and modern security practices.

As the Security Manager, you will liaise with security incident response experts, keep up to date with industry changes, and work directly with the infrastructure and development teams to ensure that their systems are appropriately secure, compliant, and resilient. You will also work to continuously educate people across the business in security matters and threats.

Key responsibilities & accountabilities:

Accountability for creating and maintaining standards and their implementation
Work with stakeholders and staff to nurture a culture where security is always in mind and seen as a critical part of everyone's responsibility
Creation of training materials and assisting with the continual upskilling of the whole company in relation to security matters relevant to their roles
Provide day to day advice in security matters across the business
Carry out business impact analysis activities relating to new changes and capabilities
Working with SOC to ensure that their incident detection models and alert response processes are kept appropriate and up to date
Coordinating with MSSP for the scoping and execution of vulnerability scanning and penetration testing

Skills & Ability:

Exposure to environments where infrastructure management is heavily automated (Infrastructure as Code)
Experience working with suppliers (licensing etc.) to negotiate and manage the services they provide
Could have Insurance industry experience
Preferably educated to degree standard or with other relevant certifications (e.g. CISSP, CISA, CISM).

Knowledge & Experience

Experience defining and implementing IT security policies within a financial services organisation and with a demonstrable understanding of associated risk management
Knowledge of security in a cloud hosted environment, especially using cloud native technologies in Azure
Knowledge of secure development practices and relevant tooling
Experience training others in security matters at all levels
Great communication skills and the ability to influence others
Experience running security testing processes such as tabletop exercises, phishing campaigns etc.