Michael James Associates
Information Security Manager
Get notified of more jobs like this · No spam, ever
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Information Security Manager
Location: London
Hybrid Working
Permanent
A leading global insurance organisation is looking for an experienced Information Security & Cyber Security GRC Manager to join its growing security function.
This is a senior role focused on strengthening the organisation’s information security governance, risk and compliance framework across a complex, highly regulated insurance environment.
You will work closely with senior technology, security, risk, compliance and business stakeholders, helping to ensure that cyber and information security risks are effectively identified, managed and reported across the organisation.
The Role
- Own and develop the Information Security and Cyber Security GRC framework across the organisation
- Develop, maintain and continuously improve information security policies, standards, processes and controls
- Lead the identification, assessment and management of information and cyber security risks
- Maintain the organisation’s cyber risk and control framework, ensuring risks are appropriately documented, owned, mitigated and monitored
- Work with technology and security teams to assess the effectiveness of security controls and identify areas for improvement
- Coordinate security risk assessments, control assessments and assurance activities across the business
- Support internal and external audits, regulatory reviews and information security assurance exercises
- Develop and deliver regular cyber security risk reporting and metrics for senior management and relevant governance committees
- Work closely with third-party risk and supplier management teams to assess the security posture of key technology partners and suppliers
- Support the management of security exceptions, risk acceptances and remediation plans
- Monitor changes in cyber security regulation, industry standards and emerging threats, ensuring the organisation's security framework remains aligned
- Contribute to wider cyber security strategy, transformation and continuous improvement initiatives
- Partner with business and technology stakeholders to embed security into projects, change programmes and new technology adoption
- Promote a strong information security culture across the organisation through effective communication, guidance and awareness
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
About You
The ideal candidate will have significant experience within Information Security, Cyber Security GRC, IT Risk or Information Security Assurance, ideally gained within a large, complex and regulated organisation.
You will have strong experience across:
- Information security governance, risk and compliance
- Cyber security risk management and control frameworks
- Information security policies, standards and procedures
- Security assurance and control assessments
- Internal and external audit management
- Third-party and supplier security risk
- Risk reporting and senior stakeholder management
- Security remediation and risk treatment
- Regulatory and compliance requirements
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Experience with recognised security and risk frameworks such as ISO 27001, NIST, COBIT or CIS would be highly advantageous.
Experience within insurance, financial services, Lloyd's or another highly regulated environment would be particularly relevant.
Professional qualifications such as CISSP, CISM, CRISC, ISO 27001 or equivalent would also be advantageous.
What We're Looking For
You should be comfortable operating at both strategic and operational levels, with the ability to translate complex cyber and information security risks into clear, commercially relevant information for senior stakeholders.
Strong communication and influencing skills are essential, as you will work across technology, cyber security, risk, compliance, legal and business teams.
You should also be comfortable challenging stakeholders where necessary and driving accountability for security risks and remediation.
This is an excellent opportunity to join a highly regarded insurance organisation and play a key role in strengthening its cyber security governance, risk and assurance capabilities.
If you are looking for a role where you can have genuine influence across a complex financial services environment, this could be an excellent next step.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Location