Information Technology Security Manager

Arthur Recruitment; Greater London; Hybrid; GBP 120,000 - 170,000; Full time

Benefits offered by this job

Hybrid work flexibility

Job summary

Arthur Recruitment is partnering with a well-established insurance organisation in London seeking an Information Security Technical Lead. You will own and drive the security roadmap, lead a team of engineers, and act as the senior escalation point for incidents in a modern Microsoft/Azure environment.

This role blends strategic security leadership with hands-on engineering across IAM, PAM, SIEM, and tooling, shaping how security supports both internal operations and external services.

Qualifications

• 7+ years in cybersecurity and 3–4+ years in a lead or senior capacity
• Hands-on leadership with security engineering and incident response experience
• Experience across security engineering and SOC environments
• Strong expertise in Microsoft security stack (Azure, M365) and cloud tooling
• Scripting/automation skills (PowerShell, Python, Bash)

Responsibilities

• Define and deliver the enterprise security strategy
• Own tooling across PAM, SIEM, EDR/XDR, DLP, vulnerability management, identity governance
• Translate regulatory requirements into practical security controls
• Implement and optimise controls across Azure, M365, and infrastructure environments
• Lead real-time incident response and develop incident playbooks
• Oversee SIEM/SOAR tooling, alerting, and response processes
• Provide security guidance across technical teams and business units

Skills

Security leadership

Team management

Incident response

Azure security

Automation scripting

Tools

SIEM

PAM

Azure

M365 security

Job description

Own, shape, and lead enterprise security within a high-impact, technology-driven insurance environment. We’re partnering with a well-established insurance organisation investing heavily in digital transformation and security capability. They are now looking to hire an Information Security Technical Lead to take full ownership of their end-to-end security function.

This is a hands‑on leadership role where you will define strategy, lead a team, and actively engineer and enhance security controls across a complex, business‑critical environment.

The Opportunity

This is not a governance-heavy or purely advisory role. You will:

• Own and deliver the security roadmap across core platforms and systems
• Lead and develop a team of security engineers
• Act as the senior escalation point for security incidents and response
• Work within a modern Microsoft/Azure environment, driving improvements across M365 security and identity
• Play a key role in shaping how security supports both internal operations and external services

You’ll sit at the intersection of infrastructure, operations, and stakeholder engagement—combining deep technical expertise with real business impact.

What You’ll Be Doing

Security Leadership & Programme Ownership

• Define and deliver the enterprise security strategy
• Own tooling and capabilities across PAM, SIEM, EDR/XDR, DLP, vulnerability management, and identity governance
• Translate regulatory requirements into practical, measurable security controls

Hands‑On Security Engineering

• Implement and optimise controls across Azure, M365, and infrastructure environments
• Drive infrastructure hardening across IAM, PAM, AD, and network layers
• Support automation and DevSecOps integration
• Lead real‑time incident response and decision‑making
• Oversee SIEM/SOAR tooling, alerting, and response playbooks
• Investigate threats using logs, forensic techniques, and threat intelligence

Security Advisory & Collaboration

• Provide security guidance across technical teams and business units
• Conduct security reviews, assessments, and improvement planning
• Act as a trusted advisor on risk, controls, and architecture

Vulnerability & Risk Management

• Own vulnerability scanning, assessment, and remediation
• Partner with engineering teams to prioritise and reduce risk exposure
• Drive continuous improvement in security posture and resilience
• 7+ years in cybersecurity, including 3–4+ years in a lead or senior capacity
• Experience across security engineering and incident response / SOC environments

Strong expertise in:

• SIEM (e.g. Sentinel, Splunk, LogRhythm)
• Identity security (IAM, PAM)
• Vulnerability management (e.g. Tenable, Pentera)
• Hands‑on experience in Azure and Microsoft security stack
• Scripting/automation skills (PowerShell, Python, or Bash)
• Strong knowledge of MITRE ATT&CK, OWASP, and modern threat landscapes

Experience in regulated environments (insurance or financial services) is advantageous.

Why This Role Stands Out

• Full ownership of InfoSec across a complex environment
• Hands‑on leadership – lead, build, and improve simultaneously
• High visibility with real influence on business outcomes
• Strong investment in cloud, tooling, and security maturity
• Excellent City location with hybrid flexibility

If you're a technical security leader who enjoys staying hands‑on, and you’re looking for a role where you can shape strategy, lead a team, and deliver real impact, this is a standout opportunity.