Cyber Security Architect

Hiscox Ltd; York and North Yorkshire; Hybrid; GBP 60,000 - 90,000; Full time

Benefits offered by this job

Bonus

Contributory pension

25 days annual leave plus 2 Hiscox days

4-week paid sabbatical every 5 years

Private medical for all the family

Job summary

Hiscox Ltd is seeking a candidate for a vital role focused on security in the context of ongoing transformation. The successful applicant will work with technology teams to ensure security in a wide range of projects, managing risks effectively. You will take the lead on projects, engage with stakeholders, and translate business needs into effective security measures.

The ideal candidate will have substantial experience in cloud security architecture and a background in regulatory frameworks within financial services. The position offers a hybrid working model and comprehensive benefits including a bonus, contributory pension, and generous leave.

Qualifications

• Experience with cloud security architecture primarily in Azure and GCP.
• Familiarity with financial services regulatory frameworks such as FCA and Lloyd's.
• Proven ability to design and implement innovative security solutions.
• Able to communicate complex security concepts to diverse audiences.
• Experience embedding security solutions into business transformations.
• Knowledge of scripting or coding to support automation initiatives.
• Understanding of security related to data science and AI.

Responsibilities

• Lead a portfolio of security projects ensuring the protection of the business.
• Manage security engagements and provide support to junior team members.
• Design and implement security solutions against cyber threats.
• Translate business needs into effective security requirements.
• Report on portfolio risk status and make recommendations.

Skills

Security architecture across cloud environments

Regulatory frameworks in financial services

Designing successful security solutions

Communicating security in context

Enabling business strategies

Automation‑first thinking

Understanding security implications of data science

Job description

Job Type: Permanent

Build a brilliant future with Hiscox

Within Hiscox, you'll find a business in the middle of genuine transformation, with complex risks, demanding regulations, and when your business lines run from life‑and‑death kidnap situations to a basement of flooded Ferraris, it turns out the risk landscape is anything but dull.

Think cyber insurance, marine cargo, kidnap and ransom, high‑net‑worth individuals. And because we underwrite cyber risk, our security team has a direct line to real‑world threat intelligence that is the envy of most organisations.

The role:

The role is split between building the security capabilities that protect us day to day and working inside a $200m transformation programme to make sure we build new things securely from the start. You'll be sitting with technology teams, underwriters, operations leads, and senior stakeholders — getting your hands on the real problems their world creates: distributed data, agentic AI, supply chain risk. Our goal is to help the business succeed safely, not catch it out.

You will take the lead on a wide portfolio of projects, managing a range of engagements concurrently and providing direct security engagement and acting as an escalation point for more junior team members and across technology, data and business peers and stakeholders. You will be able to bring together an aggregate view of risk across your portfolio to manage security resources, report overall status to key stakeholders and provide clear recommendations for action.

You will help to ensure the safety and security of our business by designing, building, and implementing security solutions to protect us against sophisticated cyber threats. You will need to be able to translate business needs into pragmatic and effective security requirements and solutions.

What experience is needed:

• Security architecture across cloud environments, primarily Azure and GCP, with some AWS in the mix. Breadth over depth.
• Regulatory frameworks in financial services: FCA, Lloyd's, NYDFS. Bonus points for DORA, though it's so new it still squeaks.
• Designing successful security solutions and driving innovation. How have you evaluated, selected and supported the implementation of new technologies that have raised the bar in terms of capability.
• Communicating security in context: board, regulator, or room full of underwriters — one size rarely fits all.
• Enabling business strategies — how have you made a difference to the business by embedding pragmatic security solutions into business transformation with tangible outcomes.
• Automation‑first thinking: you don't need to be a developer, but hands‑on experience with scripting or coding builds credibility. Tell us what you've vibe coded and how it helped.
• Understanding the security implications of large‑scale data science and AI workloads, and making life easier for the people building them.

Diversity & Benefits

At Hiscox we care about our people. We hire the best people for the job and we're committed to diversity and creating a truly inclusive culture, which we believe drives success.

Working life doesn't always have to be in the office, so we have introduced hybrid working to encourage a healthy work life balance. This hybrid working model is set by the team rather than the business to enable you to manage your own personal work‑life balance.

We see it as the best of both worlds; structure and sociability on one hand, and independence and flexibility on the other.

Our benefits package includes a bonus, contributory pension, 25 days annual leave plus 2 Hiscox days and a 4 week paid sabbatical with every 5 years' worth of service, private medical for all the family and much more.

Salary commensurate with experience.

Work with amazing people and be part of a unique culture.