Cyber Services Advisor

Canopius Group; Greater London; Hybrid; GBP 80,000 - 110,000; Full time

Benefits offered by this job

Hybrid working

Discretionary bonus

Health insurance

Pension plan

Job summary

Canopius is seeking a confident cybersecurity professional to join the Cyber Insights & Analytics team within the Cyber Underwriting division. This client-facing advisory role combines cybersecurity expertise, risk management and stakeholder engagement to help policyholders understand exposures and strengthen resilience.

You will lead engagements, conduct tabletop exercises, deliver training and translate technical findings into practical, business-focused insights for a global audience.

Qualifications

• Experience delivering external stakeholder-facing work.
• Strong cybersecurity fundamentals across IAM, endpoint/network security, vulnerability management, incident response, backup and recovery.
• Experience leading client meetings, workshops or advisory engagements with senior stakeholders.
• Excellent written communication, reports and advisory material.

Responsibilities

• Lead cybersecurity advisory engagements for policyholders, independently or with the team.
• Design and facilitate cyber incident tabletop exercises with clients.
• Deliver security awareness training, risk briefings and workshops for clients.
• Assess clients' cybersecurity risks and provide practical recommendations.
• Translate findings into clear business risks and remediation steps.
• Develop and maintain trusted relationships with policyholders, brokers and underwriters.

Skills

Cybersecurity consulting

Cyber risk advisory

Stakeholder engagement

Threat intelligence

Client engagement

Job description

The Role

Canopius is looking for a confident, commercially minded cybersecurity professional to join our Cyber Insights & Analytics team, part of the Cyber Underwriting division. This is a client-facing advisory role combining cybersecurity expertise, cyber risk management and stakeholder engagement. Working closely with our global Cyber Services team and cyber underwriters, you will help clients understand their cyber exposures, strengthen their resilience and navigate an evolving threat landscape. You will play a key role in delivering proactive cybersecurity services to policyholders, including cybersecurity tabletop exercises, security awareness and training sessions, data-led cyber risk reports and tailored advisory engagements. You will also work alongside underwriters, brokers and internal stakeholders to translate technical information and threat intelligence into practical, commercially relevant insights. We are looking for someone with strong cybersecurity foundations who can confidently lead client engagements, communicate complex topics to a range of audiences and exercise sound professional judgement. Success in this role will depend as much on your ability to build relationships, communicate effectively and provide practical advice as on your technical knowledge. You will deliver client engagements with a degree of autonomy, working closely with the wider Cyber Insights & Analytics team to coordinate activities, share expertise and contribute to the ongoing development of Canopius' proactive cyber services offering.

Job Description

The Role

Canopius is looking for a confident, commercially minded cybersecurity professional to join our Cyber Insights & Analytics team, part of the Cyber Underwriting division. This is a client-facing advisory role combining cybersecurity expertise, cyber risk management and stakeholder engagement. Working closely with our global Cyber Services team and cyber underwriters, you will help clients understand their cyber exposures, strengthen their resilience and navigate an evolving threat landscape. You will play a key role in delivering proactive cybersecurity services to policyholders, including cybersecurity tabletop exercises, security awareness and training sessions, data-led cyber risk reports and tailored advisory engagements. You will also work alongside underwriters, brokers and internal stakeholders to translate technical information and threat intelligence into practical, commercially relevant insights. We are looking for someone with strong cybersecurity foundations who can confidently lead client engagements, communicate complex topics to a range of audiences and exercise sound professional judgement. Success in this role will depend as much on your ability to build relationships, communicate effectively and provide practical advice as on your technical knowledge. You will deliver client engagements with a degree of autonomy, working closely with the wider Cyber Insights & Analytics team to coordinate activities, share expertise and contribute to the ongoing development of Canopius' proactive cyber services offering.

Responsibilities

Cybersecurity advisory and service delivery

• Lead the delivery of assigned cybersecurity advisory engagements for policyholders, working independently where appropriate and collaborating with the wider team on more complex engagements.
• Design and facilitate cyber incident tabletop exercises, helping clients evaluate their response capabilities, identify weaknesses and improve their preparedness.
• Deliver security awareness training, cyber risk briefings, workshops and other client-facing educational services.
• Assess clients' cybersecurity risks and controls, providing proportionate, practical recommendations to strengthen their security posture.
• Tailor advisory services and recommendations to clients' industries, operational environments, organisational maturity and threat exposure.
• Translate cybersecurity findings into clear business risks, helping clients understand and prioritise appropriate risk mitigation measures.

Stakeholder engagement and relationship management

• Develop trusted relationships with policyholders, brokers, cyber underwriters and other internal and external stakeholders.
• Act as a point of contact for clients and underwriters on assigned Cyber Services activities, maintaining strong working relationships and coordinating with the wider global team.
• Engage with clients to understand their needs, identify relevant cybersecurity challenges and recommend appropriate advisory services.
• Confidently present technical information and recommendations to audiences with varying levels of cybersecurity knowledge, including senior business stakeholders.
• Support policyholder onboarding and ongoing engagement, promoting awareness and effective use of Canopius' proactive cyber services.

Threat intelligence and risk insights

• Apply cyber threat intelligence and industry research to advisory engagements, ensuring recommendations reflect credible and relevant threats.
• Contribute to the wider team's production of threat intelligence data and analysis, to then communicate relevant risk insights and practical recommendations to clients and underwriters.
• Support the development and delivery of sector-specific threat intelligence reports, cyber risk briefings, webinars and thought leadership.
• Communicate the implications of emerging threats and significant cyber incidents, including relevant attack pathways, business impacts and mitigating controls.
• Work with the Cyber Services Manager and wider team to ensure threat intelligence and analytical outputs are effectively incorporated into client services and stakeholder communications.

Underwriting support

• Work closely with cyber underwriters to provide technical cybersecurity advice and support risk assessment activities.
• Communicate the significance of cybersecurity findings from different sources in the context of an organisation's overall risk profile.
• Support underwriters in understanding emerging cybersecurity risks, security control effectiveness and industry-specific threat exposures.

Service development and collaboration

• Support the ongoing development and improvement of Canopius' proactive cyber services offering, providing feedback and recommendations informed by client engagements and market needs.
• Collaborate with the global Cyber Insights & Analytics team on shared projects, client deliverables, reporting and service development initiatives.
• Contribute to client-facing content, presentations, webinars and other materials that communicate Canopius' expertise and cyber risk insights.

Qualifications

Required Skills and Experience

• At least 3 years’ experience in cybersecurity consulting, cyber risk advisory, security governance, information security or a closely related field, with a track record of independently delivering external stakeholder-facing work.
• Strong understanding of cybersecurity fundamentals, including identity and access management, endpoint and network security, vulnerability management, incident response, backup and recovery, and business resilience.
• Good understanding of common cyberattack methods, how threats can affect organisations and the security controls that help mitigate them.
• Experience leading client meetings, workshops, presentations or advisory engagements, including communicating with senior stakeholders.
• Strong interpersonal, presentation and relationship-building skills, with the confidence to engage technical and non-technical audiences.
• Ability to evaluate cybersecurity risks, identify material issues and provide practical, proportionate recommendations.
• Sound analytical judgement, including the ability to critically interpret technical information, cybersecurity data and threat intelligence.
• Commercial awareness and the ability to understand how cybersecurity risks affect business operations, decision-making and organisational priorities.
• Excellent written communication skills, with experience producing clear, structured reports, presentations or advisory materials.
• Strong organisational skills, with the ability to manage multiple engagements, prioritise competing demands and work independently.
• Collaborative approach, with the ability to contribute effectively to a geographically distributed team.

Desirable Skills and Experience

• Experience designing and facilitating cyber incident tabletop exercises or incident response workshops.
• Experience within cyber insurance, insurance risk engineering or an insurer-facing cybersecurity advisory function.
• Familiarity with recognised cybersecurity frameworks, including NIST Cybersecurity Framework, CIS Controls and ISO 27001.
• Experience interpreting cyber threat intelligence, analysing attack techniques or contributing to threat and risk reporting.
• Experience delivering security awareness programmes, cyber risk briefings or cybersecurity training.
• Experience working with organisations across varying levels of cybersecurity maturity.
• Relevant certifications such as CompTIA Security +, ISC” SSCP, ISC2 CGRC, or equivalent professional experience.

Our Benefits

ABOUT US

We offer all employees a comprehensive benefits package that focuses on their whole wellbeing. This includes hybrid working, a competitive base salary, non-contributory pension, discretionary bonus, insurances including health (family) and dental cover, and many other benefits to enhance financial, physical, social and psychological health.

About Canopius

Canopius is a global specialty lines (re)insurer. We are one of the leading insurers in the Lloyd’s of London insurance market with offices in the UK, US, Singapore, Australia and Bermuda. At Canopius we foster a distinctive, positive culture which enables us to bring our whole selves to work to flourish as people, and build a business which delivers profitable, sustainable results. Based in incredible new offices in the heart of the City of London, Canopius operates a flexible, hybrid working model and is committed to providing an environment that challenges employees to be their best and where everyone's unique contributions are recognised, valued and respected. We are fully committed to equal employment opportunities for all applicants and providing employees with a work environment free of discrimination and harassment. All employment decisions are made regardless of age, sex, gender identity, ethnicity, disability, sexual orientation, socio-economic background, religion or beliefs, marital or caring status, or any other status protected by the laws or regulations in the locations where we operate. We encourage and welcome applicants from all diverse backgrounds. We make reasonable adjustments throughout the recruitment process and during employment. Please let us know if you require any information in an alternate format or any other reasonable adjustments.