Cyber Security Lead

Primary Details

Time Type:
Full time
Worker Type:
Employee

• Location:
  
  London
• Type:
  Permanent, full time
• Hybrid role, happy to talk flexible working

QBE Europe is recruiting a Cyber Security Lead to join our European Cyber Security team in our London office. The role has accountability across operational delivery and advisory capabilities within QBE’s cyber services and value streams, with the opportunity to drive continuous improvement and transformational change in the way Cyber and information security risk is considered and mitigated across the core business, our programs and projects.

The role works to make QBE safe, secure and resilient; working to continuously out pace and outsmart cyber threat faced by our business. This intellectually challenging and highly influential role is part of an enterprise wide Cyber Security capability, accountable for safeguarding QBE from increasingly sophisticated Cyber and information security threats. This is a highly collaborative role, requiring a sustained level of curiosity and a continuous ability to grow deep technical knowledge that translates into insight to solve root‑cause problems and supports strategic business outcomes.

Having the right to work in the UK is a requirement for this role. QBE may consider sponsorship at its discretion.

At QBE, we get to the heart of what matters for our customers. And we do it all with a human touch.

We’re an international insurer with more than 13,000 people working across 26 countries – which means we’re big enough for your ambitions, yet small enough for you to make a real impact. It’s an exciting time. We’re building momentum towards our vision to become the most consistent and innovative risk partner.

What if you could have a positive impact – at work and in the world? As part of the QBE team, you’ll get to spend every day working with people who are passionate, talented and kind.

• Deliver an effective cyber and information security capability across QBE, partnering to deliver appropriate levels of engagement and risk mitigation.
• Develop the cyber and information security experience across QBE, building awareness and engendering healthy curiosity.
• Build strong collaborative relationships, providing advice and working together to identify and solve root‑cause problems; demonstrating great tenacity in reducing potential threats and risks.
• Take personal accountability for seeking out and identifying security weaknesses; seeing mitigation through to a secure conclusion.
• Drive Cyber engagement across QBE to ensure issues are identified, self‑reported and notified to key stakeholders.
• Act with integrity and transparency in threat and risk identification and problem solving.
• Role model the creation, innovation and negotiation of solutions and risk mitigation strategies; driving fast‑paced and agile behaviours.
• Drive the development, execution and assurance of an effective Cyber practice; including the adoption of relevant policy, standards, processes and templates.
• Manage and quality assure cyber service and outsourced security arrangements; ensuring delivery to SLAs, quality controls and alignment with QBE requirements.
• Drive collaboration and partnership across the QBE business value streams.
• Track compliance and security benefits to demonstrate impact and mitigation success.

• Demonstrates exceptional resilience and tenacity in managing and mitigating 24x7 cyber threats whilst successfully managing work life balance.
• Solution oriented.
• Problem‑solving mindset with the ability to see solutions through to delivery.
• Demonstrable ability to support the development of QBE cyber services and talent, building technical excellence and decision‑making confidence.
• Insightful and expert ability to consider where and how people or technology could be exploited; getting into the mindset of an adversary.
• Exceptional ability to get deeply technical and apply that skill to the business environment.
• Expertise in one or more of the following areas:
  Identity and Access Management, Data Security, Threat and Vulnerability Management, Third Party Risk, Cyber Security Infrastructure and Cyber…