Job Type:

PermanentBuild a brilliant future with Hiscox

The organisation:

You've probably seen our black and red ads on the tube or heard us on the radio. Insurance exists to make bold things possible, smoothing out the unpredictable so others can take the risks worth taking. There's more going on here than the sector's reputation suggests – it’s arguably one of the greatest economic forces for good ever invented.

Within Hiscox, you'll find a business in the middle of genuine transformation, with complex risks, demanding regulations, and when your business lines run from life-and-death kidnap situations to a basement of flooded Ferraris, it turns out the risk landscape is anything but dull.

Think cyber insurance, marine cargo, kidnap and ransom, high-net-worth individuals. And because we underwrite cyber risk, our security team has a direct line to real-world threat intelligence that is the envy of most organisations.

The role:

The role is split between building the security capabilities that protect us day to day and working inside a $200m transformation programme to make sure we build new things securely from the start. You'll be sitting with technology teams, underwriters, operations leads, and senior stakeholders - getting your hands on the real problems their world creates: distributed data, agentic AI, supply chain risk. Our goal is to help the business succeed safely, not catch it out.

You will take the lead on a wide portfolio of projects, managing a range of engagements concurrently and providing direct security engagement and acting as an escalation point for more junior team members and across technology, data and business peers and stakeholders. You will be able to bring together an aggregate view of risk across your portfolio to manage security resources, report overall status to key stakeholders and provide clear recommendations for action.

You will help to ensure the safety and security of our business by designing, building, and implementing security solutions to protect us against sophisticated cyber threats. You will need to be able to translate business needs into pragmatic and effective security requirements and solutions.

What experience is needed:

You will cover a lot of ground, engaging with a broad range of projects and technologies so flexibility and technical breadth are key. One caveat on the list below: we mean things you've personally led and have done at depth, not things someone else did in a department down the hall that you heard about over lunch. Three or four puts you at the top. A solid two with ambitions on three or four? Still worth a chat:

• Security architecture across cloud environments, primarily Azure and GCP, with some AWS in the mix. Breadth over depth.
• Regulatory frameworks in financial services: FCA, Lloyd's, NYDFS. Bonus points for DORA, though it's so new it still squeaks