Infrastructure & Network Security Specialist

Role Description As the Infrastructure & Network Security Specialist you will be responsible for governing, planning and delivering the safeguarding of Allianz UK infrastructure by enforcing robust security policies, managing technical controls, and ensuring compliance with internal and external standards. Ideally you will bring a strong technical foundation in Infrastructure IT security, a keen understanding of risk management frameworks, and the ability to collaborate across teams to drive continuous improvement in our security posture.

You will own IT related activities within the information security framework and will work closely with information security, IT/IS risk functions and outsourced service providers to confirm that these aspects of the framework are fully implemented and can be evidenced as effective.  Where remedial activities are required, you will ensure that appropriate risks are documented, with tracked remedial actions, to completion.

Location This role is based in our Guildford office. This is a hybrid role with the expectation that you attend the office 2 days per week.

Salary Information Pay:
Circa 80,000 per year.

Pay is based on relevant experience, skills for the role, and location. Salary is only one part of our total reward package.

Key Accountabilities As the Infrastructure & Network Security Specialist you will Accountable for all information security risks and controls owned by IT.Work in conjunction with Information Security, IT, business stakeholders and outsourced partners to ensure the effective management and continuous improvement of security risks across the IT environment.

Report IT risk management status to senior stakeholders.

Manage and oversee outsourced partners and their adherence to control frameworks.

Collaborate with team members across cloud, infrastructure and workplace to build expertise within the team concerning security capabilities.

Produce business cases when project investment is required to further long-term IT ambitions in elevating capabilities.  Act as sponsor or key stakeholder for relevant project deliveries.

Engage with projects during service acceptance to ensure that project deliveries do not introduce IT risk Ensure compliance to internal Allianz Policies, Standards and Functional Rules Ensure compliance to internal Audit controls

Ensure compliance to regulatory and other external audits

Have ownership and delivery of actions to address any audit or compliance findings

Technical Skills Role Specific One or more of CISA, CISSP or CRISCGood working knowledge of NIST and COBIT frameworks

Deep understanding of data centre/network and workplace architectures and operations both within the insurance industry and market generally  Sound understanding of IT risk management processes and experience of leading mitigation and remediation activities

Management of third parties – especially offshore

Deep understanding of IT security management processes, practices and technology.

Good understanding of security design, including cryptography, within infrastructure, application and workplace environments.

Generic Excellent business awareness and focus on customer service

Adaptive and responsive to change

Ability to build and manage relationships

Ability to build partnerships across Allianz business units

Ability to effectively work with virtual teams

Results and delivery focused

Ability to use planned and structured approaches

Excellent communication skills; approachable; authoritative; diplomatic; demonstrates empathy

Effective team-member, trainer and coach Responsible Artificial Intelligence usage

Experience

Proven experience in IT including hands-on with security tooling, risk analysis, or governance roles within complex enterprise environments.

Excellent understanding of communication protocols (e.g., TCP/IP, HTTP/S, SMTP), network architecture and security technologies.

Hands-on experience with proxy servers, email gateways, firewalls, and routing devices.

Familiarity with industry standards and frameworks such as ISO 27001, NIST, CIS Controls, and ITIL.

Experience with automation tools and scripting languages (e.g., Power Shell, Python) for configuration and compliance checks.

Knowledge of patch and vulnerability management tools and practices.

Understanding of identity and access management (IAM) principles and technologies.

Working closely with and influencing senior stakeholders across a large multi-national commercial organisation.

Managing IT and application of information security…