Information Security Manager

Key responsibilities

• Developing and implementing comprehensive information security policies, procedures, and standards aligned with industry best practices and regulatory requirements
• Overseeing the design, deployment, and maintenance of security infrastructure, including firewalls, intrusion detection systems, and access control mechanisms
• Conducting regular security risk assessments and vulnerability analyses to identify potential threats and weaknesses in systems and processes
• Managing incident response protocols and leading investigations into security breaches or unauthorised access attempts
• Ensuring compliance with relevant regulatory frameworks, industry standards, and data protection legislation applicable to the insurance sector
• Leading and supervising the information security team, including recruitment, training, performance management, and professional development
• Liaising with external vendors, auditors, and regulatory bodies regarding security matters and compliance obligations
• Conducting security awareness and training programmes for employees across all levels of the organisation
• Monitoring and evaluating emerging security threats and technologies to ensure the organisation remains protected against current and future risks
• Preparing regular reports and presentations for senior management and the board on security performance, incidents, and recommendations

About you

• Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or a related discipline
• Minimum of 5-10 years of professional experience in information security roles, with at least 3-5 years in a management or leadership capacity
• Advanced knowledge of security frameworks and standards, such as ISO/IEC 27001, NIST Cybersecurity Framework, or similar industry-recognised certifications
• Professional certifications such as CISSP (Certified Information Systems Security Professional), CISM (Certified Information Security Manager), or equivalent recognised qualifications
• Demonstrated expertise in risk management, threat analysis, and vulnerability assessment methodologies
• Strong understanding of network security, application security, database security, and infrastructure protection
• Experience with security tools and technologies, including firewalls, intrusion detection/prevention systems, security information and event management (SIEM) platforms, and endpoint protection solutions
• Proven ability to develop and communicate security strategies to both technical and non-technical stakeholders
• Experience in managing and leading technical teams, including hiring, training, and performance evaluation
• Knowledge of regulatory compliance requirements in the insurance or financial services industry is highly desirable
• Strong analytical, problem-solving, and critical thinking skills with the ability to make sound decisions under pressure
• Excellent written and verbal communication skills with the ability to present complex security concepts in an accessible manner.