Business Information Security Officer
4 weeks ago
Job Title: Business Information Security Officer
Job Summary:
The Business Information Security Officer plays a pivotal role in bridging the gap between business objectives, cybersecurity, and data protection strategy, focusing on excellence in protecting, detecting, resolving, mitigating, recovering, and learning from potential security exposures. This role will provide execution management to ensure MS Amlin has the appropriate cybersecurity and data protection posture across its ecosystem.
About the Role:
Embed Information Security and Data Protection Strategy
- Serve as a trusted point of contact across MS Amlin, ensuring uniformity in cybersecurity policies and practices.
- Collaborate with cross-entity security teams to implement cybersecurity policies related to security operations, incident response, application security, and infrastructure.
- Assess and contribute to the strategy to achieve and maintain appropriate information security practices, controls, resilience, risk identification, and responses across MS Amlin's estate and data landscape.
- Advise, adopt, and embed the information security framework and certification appropriate to our organisation and market, in line with strategic objectives and relevant jurisdictional requirements.
- Work with internal and external stakeholders to assess the impact of new projects, solutions, partnerships, and regulations on security and data protection posture and provide support in implementation.
Protect, Detect, Respond, Recover, Improve Management
- Enable MS Amlin's horizon scanning for security threats, vulnerabilities, and mitigations, and work with internal and external stakeholders to best protect MS Amlin's estate and data.
- Ensure Cyber and Data Protection continual compliance and vulnerability closure for Operational Resilience, Continuity Management, and other relevant regulations.
- Report on MS Amlin's cyber security and data protection capabilities, recovery, and disruption plans, with a focus on continual improvement and increasingly sophisticated testing.
- Ensure MS Amlin's disaster recovery, immutable backup are adequate, exercised, and maintained in line with business requirements.
- Determine and obtain/maintain relevant Cyber Certification and Frameworks (NIST, ISO27001, CIS, CQUEST, etc).
- Assist in assessing the impact of Cyber Frameworks (NIST, new laws, regulations, and standards) on business operations and implement necessary measures for compliance.
- Ensure security content training initiatives are conducted regularly and internal/external communication regarding cybersecurity is disseminated effectively.
- Develop standards and assess risks of third-party relationships on posture and data protection, advising and monitoring mitigations, providing oversight in BAU.
Advocacy
- Motivate MS Amlin to prioritise cybersecurity controls and remove obstacles hindering efficient security measures.
- Work with the business to incorporate security-by-design principles into projects, architecture, infrastructure, and applications.
- Work with cross-entity, cross-market, and cross-value chain stakeholders to establish and embed information security and data protection standards, resilience, response, and recovery capabilities and continually mature to maintain posture within tolerances.
- Represent MS Amlin internally and externally with professionalism and integrity.
Dimensions
- The BISO reports into the Head of Operational and Cyber Resilience and the into Operations Director (SMF24).
- The job holder will also work closely with the MS Amlin COO, IBS, and Resource Owners, MS ABS (our internal Service Company), other senior stakeholders, and with counterparts across Operations, Line 2, Line 3, and Service Providers to monitor and resolve issues and align capabilities with resilience monitoring, management, remediation.
- Preparation of regulatory reporting inputs to FCA, Lloyd's, the PRA, Auditors, and Board members.
- Draft high-quality and reliable MI packs and Board papers, providing insight and in-depth analysis to senior stakeholders.
You'll Enjoy This Job If:
- You flourish in fast-paced, dynamic environments where you can shape solutions and influence outcomes.
- You enjoy advocating, creating buy-in, and engagement across a range of views and stakeholders.
- You have a strong eye for detail.
- You can convey complex messages and concepts simply, with focus on the core issues and recommendations.
What You'll Need:
- Knowledge of national and global cybersecurity policies, regulations, and frameworks.
- Familiarity with a wide range of cybersecurity solutions and technologies.
- Experience in response and recovery capabilities.
- Knowledge of data protection, classification, and relevant regulations and laws.
- Good written and verbal communication skills, with the ability to engage stakeholders at all levels.
- Understanding of business processes and the ability to integrate cybersecurity seamlessly.
- Experience in financial services and preferably Insurance/Lloyd's market.
- Experience in cybersecurity and/or information technology and project management.
- Knowledge of data protection practices, third-party assessment, and operational resilience.
- Knowledge of complex regulatory and contractual requirements and an ability to create effective compliance systems.
- Proven experience of working with IT security systems and information security governance, i.e., control frameworks, incident management, operations, and application of security best-practices.
- Familiarity with vendor security risk and data protection reviews and controls.
- Certification such as CISSP, CISM, CRISC, or CISA preferred but not essential.
What You Can Expect From Us:
- Competitive Base Salary
- Performance Related Discretionary Bonus
- Holiday: 28 days core annual leave, and you can buy up to 5 days
- Pension: A minimum 2% employee contribution plus 7% MS Amlin contribution (9%) up to a maximum of 5% employee contribution plus 13% MS Amlin contribution (18%)
- Private Medical: cover for yourself. Family members/dependants can be added.
- Flex Fund: £1,000 (pro-rated based on start date) to spend on flexible benefits.
- Life Assurance: 10 x annualised base salary
- Enhanced Parental Leave (maternity and paternity): 6 months full pay, entitled from day 1.
- Continuous Learning Approach: Including study support with professional qualifications.
- Employer Supported Volunteering: 3 days volunteering leave.
- Annual health screening
- Give as you earn
- Cycle to work
- Season ticket loan
- Green car scheme
- Retail discount platform
About MS Amlin:
MS Amlin is part of a global top-10 insurance group, MS&AD. We're made up of four distinct businesses covering global reinsurance, Lloyd's franchise, local specialty insurer, and business services.
#LI-MSAUL
-
Information Security Officer
4 weeks ago
London, Greater London, United Kingdom DWS Group Full timeAbout the RoleWe are seeking a highly skilled Information Security Officer to join our team at DWS Group. The successful candidate will be responsible for ensuring the confidentiality, integrity, and availability of our information systems and assets.Key ResponsibilitiesAssume ownership and responsibility for assigned IT assets, in line with the Group...
-
London, Greater London, United Kingdom Context Information Security Full timeContext Information Security is a dynamic and growing company that offers a unique opportunity for experienced Python/Django developers to grow their careers in the field of cyber security.About UsWe are a leading provider of cyber security services, working with high-profile clients to deliver innovative solutions to complex security challenges. Our team of...
-
Security Officer
1 month ago
London, Greater London, United Kingdom Ward Security Limited Full timeWard Security Limited is seeking a skilled Security Officer to join their team at 11 Slingsby Place, London. The ideal candidate will have a valid Frontline SIA license and at least one year of experience as a Corporate Security Officer.Main Responsibilities:Act as a point of contact and information center for staff, visitors, and tenants.Conduct regular...
-
Chief Security Information Officer
5 days ago
London, Greater London, United Kingdom Canada Life Full timeWe are seeking a highly skilled Chief Security Information Officer to join our team at Canada Life.With over 175 years of experience in supporting the financial, physical and mental wellbeing of Canadians, we are committed to staying at the forefront of innovation and security best practices.The successful candidate will be responsible for leading our...
-
Information Security Officer
5 days ago
London, Greater London, United Kingdom Deutsche Bank Full timeAbout the Role:">This is a challenging and exciting opportunity to lead our Cybersecurity Strategy at Deutsche Bank. We are seeking a highly experienced and skilled Chief Information Security Officer who will be responsible for driving our information security initiatives, identifying risks, and developing policies to ensure the protection of our...
-
Chief Information Security Officer
4 weeks ago
London, Greater London, United Kingdom The Restaurant Group Ltd Full timeThe Restaurant Group Ltd is seeking a highly skilled Chief Information Security Officer to lead its information security strategy and ensure the protection of digital assets, systems, and sensitive data across the organisation.This role involves developing and implementing a comprehensive information security strategy tailored to the needs of the company,...
-
Python Developer
5 days ago
London, Greater London, United Kingdom Context Information Security Full timeAt Context Information Security, we are seeking an experienced Python developer to join our team in London. With a strong background in Django, you will be responsible for developing and maintaining our web applications, including the CHAOS project.Company OverviewContext is an independent cyber security consultancy founded in 1998. We work with high-profile...
-
Business Information Security Specialist
1 month ago
London, Greater London, United Kingdom Avature Full timeJob Title: Business Information Security OfficerThe Bloomberg Information Security team is dedicated to making our products and technologies as secure as possible through design, development, and operation. We report into the Chief Information Security Office while working closely with regulated businesses, key lines of business, and development/engineering...
-
Information Security Consultant
1 day ago
London, Greater London, United Kingdom Heartland Business Systems Full timeJob Summary">We are seeking a highly skilled Information Security Consultant to join our team at Heartland Business Systems. As an Information Security Consultant, you will be responsible for conducting technical testing to identify security risks and making recommendations for improvements through administrative, technical, and physical controls.The ideal...
-
Security Officer
1 month ago
London, Greater London, United Kingdom Ward Security Limited Full timeWard Security Limited is seeking a skilled Security Officer to join our team at 11 Slingsby Place, London. As a Security Officer, you will be responsible for ensuring the safety and security of our clients' properties and assets.Main Responsibilities:Conduct regular patrols of the premises to deter and detect potential security threatsRespond to incidents...
-
Chief Information Security Officer
1 month ago
London, Greater London, United Kingdom Bloomberg L.P. Full timeBusiness Information Security Officer in London, United KingdomOur Team:We safeguard Bloomberg's information assets.The Bloomberg Information Security team is dedicated to making our products and technologies as secure as possible through design, development, and operation. We report into the Chief Information Security Office while working closely with...
-
Chief Information Security Officer
5 days ago
London, Greater London, United Kingdom Vallum Associates Full timeJob Description:Vallum Associates is seeking a highly skilled Chief Information Security Officer to lead our information security efforts. This is a challenging and rewarding opportunity for an experienced security professional to make a significant impact on the company's security posture.As a key member of our team, you will be responsible for developing...
-
Information Security Specialist
1 month ago
London, Greater London, United Kingdom Security Bank & Trust Co. Full timeJob Summary:We are seeking an experienced Information Security Specialist to join our team at Security Bank & Trust Co. As an ICT Cyber Security Officer, you will play a critical role in ensuring the security and integrity of our technological infrastructure.Key Responsibilities:Install and maintain servers, network switches, and storage systems to support...
-
Business Information Security Manager
1 month ago
London, Greater London, United Kingdom Avature Full timeJob Title: Business Information Security OfficerAbout the Role:The Bloomberg Information Security team is dedicated to making our products and technologies as secure as possible through design, development, and operation. We report into the Chief Information Security Office while working closely with regulated businesses, key lines of business, and...
-
Chief Information Security Officer
1 week ago
London, Greater London, United Kingdom The Restaurant Group Ltd Full timeWe're The Restaurant Group Ltd, a leading hospitality business in the UK. With over 40 years of experience, we operate a diverse portfolio of renowned restaurants and pubs, including Wagamama, Barburrito, and Brunning & Price.As Chief Information Security Officer, you will lead our information security strategy, ensuring the protection of digital assets,...
-
Chief Information Security Officer
1 month ago
London, Greater London, United Kingdom 00002 Citibank, N.A. Full timeOverview of the Organization:Citi, a leading global bank, has approximately 200 million customer accounts and operates in over 160 countries and jurisdictions. The company provides a wide range of financial products and services to consumers, corporations, governments, and institutions, including consumer banking and credit, corporate and investment banking,...
-
Information Security Specialist
3 weeks ago
London, Greater London, United Kingdom Iceberg Cyber Security Full timeIceberg Cyber Security is seeking an Information Security Specialist to join its security assurance team. The role will focus on achieving information security, accreditation such as NIST, ISO-27001, JSP 440. To be successful in this role the candidate must have a familiarity working with a secure by design approach and experience communicating with senior...
-
Chief Information Security Officer
5 days ago
London, Greater London, United Kingdom NP Group Full time £60,000Job Title: Chief Information Security OfficerType: Full-Time - HybridUp to £60,000 + company benefitsLocation: London (Hybrid)Job Description:The Chief Information Security Officer will be responsible for managing all aspects of information security within IT. This includes maintaining security systems, overseeing vulnerability testing and penetration tests...
-
Security Officer Position
3 days ago
London, Greater London, United Kingdom Ward Security Limited Full timeJob Title: Security OfficerWe are seeking a professional and reliable Security Officer to join our team at 2 Lavington St, London. As a key member of our security team, you will be responsible for ensuring the safety and security of our premises, staff, and visitors.Main Responsibilities:Act as a point of contact and information center to staff, visitors,...
-
Chief Information Security Officer
1 month ago
London, Greater London, United Kingdom Bestmansolutions Full timeHead of Information SecurityBestmansolutions is seeking a seasoned Head of Information Security to lead their Cyber Security function. This pivotal role will support the Chief Information Security Officer (CISO) in ensuring the enterprise's information security management program is robust and effective.Key Responsibilities:Collaborate with the CISO to...