Cyber Security Consulting Lead

QBE Europe; Greater London; Hybrid; GBP 110,000 - 140,000; Full time

Benefits offered by this job

30 days holiday

Flexible working

Pension plan

Job summary

QBE Europe is seeking a Cyber Security Consulting Lead to join our London office, leading security assurance, risk assessments, and advisory for IT and business projects. You will collaborate with Architects and design SMEs to embed secure patterns and controls across cloud and on‑premise environments.

The role requires strong knowledge of security standards (NIST, ISO, PCI‑DSS) and the ability to drive mitigations to a secure outcome while working across global teams and time zones.

Qualifications

• Relevant security certifications preferred.
• Strong understanding of security standards (NIST, ISO, PCI-DSS).
• Experience leading security risk assessments and mitigations.
• Ability to work across in‑house and outsourced models globally.

Responsibilities

• Lead security assurance and advisory for IT and business projects against NIST 800-53.
• Partner with security architecture to embed secure patterns and controls.
• Develop non-functional security requirements for solution designs.
• Carry out security risk assessments and provide mitigation actions.
• Collaborate with IT and business stakeholders to correct non‑compliant processes.
• Support strategic global and regional security projects and deployments.

Skills

Security and risk expertise

Stakeholder management

Independent worker

Education

CISSP

CCSP

CRISC

CISM

Tools

NIST 800-53

ISO 2700X

PCI-DSS

Job description

Primary Details

Time Type: Full timeWorker Type: Employee

Cyber Security Consulting Lead

• Location: London
• Type: Permanent, full time
• Hybrid role, happy to talk flexible working

The Opportunity

QBE Europe is a Cyber Security Consulting Lead to join our European Cyber Security team in our London Office. This role will p r… The role will require the ability to work with Architects and Solution Design SME's across a range of technologies toidentifyCyber threats and gaps in controls and processes. The regular output across workstreamswill be the production of the Secure by Design assessment, NFR's and supporting the project inidentifying,remediatingor raising relevant risks.

Your new role

• Lead security assurance, assessments, advisory for IT and Business projects(Cloud and On-prem)within EO and globally against the NIST 800-53 cyber security standard and compliance framework
• Partner with the security architectureand other relevant teams to define security patterns and ensure thatappropriate securitycontrols are embedded within solutions.
• Develop non-functional security requirements and provide directions on how they should be integrated into solution designs.
• Carry out security risk assessments and provide theappropriate mitigationtoidentifiedrisks.
• Collaborate, guide and influenceIT and Business stakeholdersincorrectingnon-compliant processes.
• Assistand contribute to strategic global, and regional security projects and initiativesandtheirdeployment within EO and Global security teams.

About You

• Security and Risk Expertise
• Demonstrable experience applying security and risk-based standards, including ISO 2700X, ISO 31000, NIST 800, and PCI-DSS.
• Strong understanding of how to identify security weaknesses and take accountability for driving mitigations through to a secure outcome.
• Stakeholder and Delivery Experience
• Experience working across in-house and outsourced service models, multiple time zones, and multicultural environments.
• Able to work independently while seeking support when needed.
• Preferred Experience
• Financial services experience would be advantageous with awareness of APRA, PRA, FCA .

Desired Qualifications

• Certified Information Systems Security Professional (CISSP)
• Sherwood Applied Business Security Architecture (SABSA) or equivalent, highly regarded.
• Certified Cloud Security Professional (CCSP) or equivalent
• Certified Risk and Information Systems Controls (CRISC)
• Other security certifications such as Certified Information Security Manager (CISM)

Benefits

We offer a range of benefits to help provide holistic support for your work life, whatever your circumstances. As a QBE employee you will have access to and benefit from:

• 30 days holiday a year with the option to buy up to 2 additional days.
• Flexible working - balancing work and life is important so our flexible working opportunities are open to all, this can include part-time, job share and compressed hours.
• Pension – you are automatically enrolled into the QBE pension plan, which entitles you to receive employer contributions of 10% of your basic salary.

Awards & Recognition

• Winner: Commercial Lines Insurer of the Year, Winner: Reinsurer of the Year - QBE Re, Winner: ESG, Diversity, Equity and Inclusion Initiative of the Year, Winner: Insurance Personality of the Year - Chris Wallace, Executive Director UK insurance
• AXCO Global Insurance Awards 2024 Winner: Network Management of the Year
• Insurance Business UK 5-Star Cyber Awards 2024: QBE rated as a 5-Star Cyber Insurer

Skills

Client Counseling, Commercial Acumen, Conflict Management, Critical Thinking, Customer Service, Cybersecurity, Cyber Security Governance, Cyber Security Management, Information Security, Information Security Risk Management, Intentional collaboration, Managing performance, Problem Solving, Quality Control (QC), Risk Management

Equal Employment Opportunity

QBE is an equal opportunity employer and is required to comply with equal employment opportunity legislation in each jurisdiction it operates.