Senior Cyber Security & Risk Assurance Lead

Lancashire Insurance Group; Greater London; Presencial; GBP 70.000 - 110.000; Jornada completa

Descripción de la vacante

Lancashire Insurance Group in London is seeking an Information Security professional to lead and manage the ISMS program, ensuring alignment with regulatory requirements and recognised frameworks such as ISO 27001 and NIST CSF. You will translate strategy into operational assurance activities and oversee risk management across IT, cloud and third parties.

The role requires hands-on experience in security assurance, control testing, audit remediation and effective governance, with a collaborative

Formación

• Senior information security experience at a specialist level.
• Hands-on cyber risk management and assurance delivery.
• Technical security assurance across infrastructure, apps and cloud.
• Knowledge of ISO 27001 and NIST CSF frameworks.
• Experience supporting regulatory obligations (FCA, PRA, etc).
• Experience in audit remediation and third-party risk processes.
• Ability to mentor team members and translate strategy to delivery.

Responsabilidades

• Lead and deliver the ISMS program, aligning with regulatory requirements and frameworks.
• Translate strategy into operational assurance activities with governance and reporting.
• Own day-to-day cyber risk management including risk register and remediation oversight.
• Conduct cyber risk and control assessments across business, changes, and third parties.
• Deliver technical assurance activities: control testing and evidence gathering.
• Coordinate responses to audit findings and ensure timely remediation.
• Support regulatory reporting and maintain documentation to demonstrate compliance.
• Provide SME guidance across IT infrastructure, cloud and third-party environments.
• Participate in governance forums (e.g. CAB) to address security implications of changes.
• Evaluate new systems and onboarding for security compliance.

Conocimientos

Senior information security

Cyber risk management

ISO 27001

NIST CSF

Regulatory compliance

Audit support

Third-party risk

Mentoring

Descripción del empleo

Lancashire Insurance Group in London is seeking an Information Security professional to lead and manage the ISMS program, ensuring alignment with regulatory requirements and recognised frameworks such as ISO 27001 and NIST CSF. You will translate strategy into operational assurance activities and oversee risk management across IT, cloud and third parties.

The role requires hands-on experience in security assurance, control testing, audit remediation and effective governance, with a collaborative