Job Type:
Permanent
Build a brilliant future with Hiscox
The organisation:
You've probably seen our black and red ads on the tube or heard us on the radio. Insurance exists to make bold things possible, smoothing out the unpredictable so others can take the risks worth taking. There's more going on here than the sector's reputation suggests – it’s arguably one of the greatest economic forces for good ever invented.
Within Hiscox, you'll find a business in the middle of genuine transformation, with complex risks, demanding regulations, and when your business lines run from life-and-death kidnap situations to a basement of flooded Ferraris, it turns out the risk landscape is anything but dull.
Think cyber insurance, marine cargo, kidnap and ransom, high-net-worth individuals. And because we underwrite cyber risk, our security team has a direct line to real-world threat intelligence that is the envy of most organisations.
The role:
The role is split between building the security capabilities that protect us day to day and working inside a $200m transformation programme to make sure we build new things securely from the start. You'll be sitting with technology teams, underwriters, operations leads, and senior stakeholders - getting your hands on the real problems their world creates: distributed data, agentic AI, supply chain risk. Our goal is to help the business succeed safely, not catch it out.
You will take the lead on a wide portfolio of projects, managing a range of engagements concurrently and providing direct security engagement and acting as an escalation point for more junior team members and across technology, data and business peers and stakeholders. You will be able to bring together an aggregate view of risk across your portfolio to manage security resources, report overall status to key stakeholders and provide clear recommendations for action.
You will help to ensure the safety and security of our business by designing, building, and implementing security solutions to protect us against sophisticated cyber threats. You will need to be able to translate business needs into pragmatic and effective security requirements and solutions.
What experience is needed:
You will cover a lot of ground, engaging with a broad range of projects and technologies so flexibility and technical breadth are key. One caveat on the list below: we mean things you've personally led and have done at depth, not things someone else did in a department down the hall that you heard about over lunch. Three or four puts you at the top. A solid two with ambitions on three or four? Still worth a chat:
Security architecture across cloud environments, primarily Azure and GCP, with some AWS in the mix. Breadth over depth.
Regulatory frameworks in financial services: FCA, Lloyd's, NYDFS. Bonus points for DORA, though it's so new it still squeaks
Designing successful security solutions and driving innovation. How have you evaluated, selected and supported the implementation of new technologies that have raised the bar in terms of capability.
Communicating security in context: board, regulator, or room full of underwriters - one size rarely fits all.
Enabling business strategies – how have you made a difference to the business by embedding pragmatic security solutions into business transformation with tangible outcomes.
Automation-first thinking: you don't need to be a developer, but hands-on experience with scripting or coding builds credibility. Tell us what you've vibe coded and how it helped.
Understanding the security implications of large-scale data science and AI workloads, and making life easier for the people building them
We've been unlocking progress for 125 years - from steam ships to cyber risk to autonomous systems. It's been a wild ride. Back-to-back record profits, a $200m transformation, and ambitions to match. Come and help us make sure the next chapter is built securely.
Diversity & Benefits
At Hiscox we care about our people. We hire the best people for the job and we’re committed to diversity and creating a truly inclusive culture, which we believe drives success.
Working life doesn’t always have to be in the office, so we have introduced hybrid working to encourage a healthy work life balance. This hybrid working model is set by the team rather than the business to enable you to manage your own personal work-life balance.
We see it as the best of both worlds; structure and sociability on one hand, and independence and flexibility on the other.
Our benefits package includes a bonus, contributory pension, 25 days annual leave plus 2 Hiscox days and a 4 week paid sabbatical with every 5 years’ worth of service, private medical for all the family and much more.
Salary commensurate with experience.
Work with amazing people and be part of a unique culture
