IT Operations and Security Lead

IT Operations Platforms and Security Lead

In summary the Client is looking to recruit an all‑round individual with expert knowledge and hands‑on experience of IT Infrastructure coupled with Security, Compliance & Risk Management

You must have upwards of 10 years hands‑on expertise in IT Infrastructure combined with Security and Risk – ideally from within the banking or insurance sector.

The IT Operational Platform and Security Lead is responsible for overseeing the organisation’s IT operations, ensuring the stability, continuity, security, and efficiency of its technology platforms within a global commercial insurance environment.

While Microsoft technologies (Microsoft 365, Azure, Exchange Online) form a core part of the infrastructure, the role also encompasses broader enterprise IT systems, multi‑layered networking, security, data management, and third‑party platforms that support global business operations and the associated applications estate.

The role requires a proactive leader who can drive IT operational excellence, manage security risks, focus on continual service improvement, drive transformational delivery projects, and work effectively with internal stakeholders and third‑party vendors to deliver a high‑quality Global IT services.

Working in line with the Architecture defined IT principle of a “buy before build” environment, the individual will need to ensure that outsourced and cloud‑based services are robust, cost‑effective, and aligned with business needs and the Strategic IT vision. They will also play a key role in enhancing cybersecurity, protecting data and systems, driving transformative operational change, enhancing IT processes and ensuring compliance with governance bodies and industry regulations.

Due to the nature of the role, complexity of the estate, current transformation activities and team size, the role requires the functional capability and proficiency to technically augment the team capabilities (when required) and have a detailed knowledge of technical IT support roles/services as a requirement, across multiple technical areas.

• Define and enforce cloud security policies, identity management, and access controls to protect systems, networks, and data.
• Oversee the adoption of zero‑trust security principles to enhance protection across cloud platforms.
• Manage identity and access management (IAM) in a cloud‑first environment, including Azure AD, MFA, Conditional Access, SSO, and Privileged Access Management (PAM).
• Lead threat monitoring, detection, and response using cloud‑native security solutions such as Microsoft Defender, Sentinel, and SIEM platforms.
• Ensure compliance with cloud security frameworks and regulatory requirements (ISO 27001, NIST, GDPR, SOC2, FCA).
• Conduct regular security risk assessments, penetration tests, and vulnerability management across cloud services.
• Oversee endpoint security, cloud network and API security for robust protection across all assets.
• Define, manage and maintain accurate DR and BCP plans for the infrastructure area with biannual tests.

• Microsoft Azure Infrastructure design and administration, including topology, Azure networking, services, and component knowledge.
• Microsoft AD (Entra), Server and SQL experience.
• O365 administration and design.
• Global Software Patching and estate management via Intune.
• Firewall (Azure, CheckPoint and Cloudflare), DNS, VPN, WIFI and Local Area Network design & administration experience.
• Software Defined Networking (Cisco, Meraki, Versa).

• Microsoft 365 & Azure:
  Strong experience managing Microsoft 365 (Exchange, SharePoint, Teams), Azure cloud infrastructure, and security tools such as Microsoft Defender and Sentinel.
• Security & Compliance:
  Deep knowledge of security frameworks (ISO 27001, NIST, CIS), compliance requirements (GDPR, SOC2), and risk management best practices.
• Identity & Access Management (IAM):
  Expertise in Azure AD, MFA, Conditional Access, Single Sign‑On (SSO), and Privileged Access Management (PAM).
• Threat Management & Incident Response:
  Ability to detect, respond to, and mitigate cyber threats using SIEM, endpoint security,…