IT Security & Compliance Manager

MS Amlin; Rotterdam; On-site; EUR 120,000 - 180,000; Full time

Job summary

MSIG Specialty Marine in Rotterdam seeks an IT Security & Compliance Manager to build and lead the security function. You will establish foundations, practices and a team, balancing planning with hands-on delivery, and act as the local interface with the Group CISO to ensure global standards are adopted locally.

You will shape security governance, risk management and resilience, work with senior leadership, and implement practical improvements within a growing international marine insurance

Qualifications

• Experience establishing or developing a security function.
• Experience coordinating audits and regulatory compliance.
• Ability to translate risk into business language.

Responsibilities

• Develop and implement a security strategy and roadmap.
• Build and lead a security team, defining capabilities and recruitment.
• Collaborate with Group security to align local practices with wider requirements.
• Oversee vulnerability management and incident response.
• Lead third‑party security risk assessments and procurement security.

Skills

Security leadership

Strategic thinking

People management

Audits & compliance

Stakeholder communication

Education

Bachelor’s degree in Information Security or related

Tools

Azure

Microsoft 365

SSDLC

Job description

About MSIG Specialty Marine

MSIG Specialty Marine is a leading Managing General Agent (MGA) delivering tailored marine insurance solutions to clients across the globe. By combining multiple carrier options with A-rated capital strength, we provide flexible and innovative insurance solutions in a complex and rapidly evolving market. With approximately 250 specialist professionals across Europe, we bring together one of the industry’s most experienced teams of underwriters, claims specialists and risk advisors. Our expertise spans eight core marine insurance product lines, supported by deep technical knowledge, market insight and a strong client first mindset. Our ambition is simple: to be the world‑class partner for marine insurance, combining technical excellence with exceptional service. From innovative risk solutions to trusted claims handling, we help our clients navigate uncertainty with confidence.

About the role

As IT Security & Compliance Manager at MSIG Specialty Marine, you will build and lead our security function, establishing the foundations, practices and team needed to support the business. This role combines strategic direction, people leadership and hands‑on delivery. Working closely with the Head of IT, you will have scope to shape our security approach, recommend priorities and implement practical improvements within the wider Group framework. You will join a developing organisation within an established international group. The initial focus will be on establishing the function and embedding effective ways of working, which requires someone comfortable moving between planning, implementation and day‑to‑day operational responsibilities. As the primary local interface with the Group CISO, you will ensure global security standards are adopted locally, own the security control framework, and make sure security is embedded by design, risks are proactively managed and controls remain effective and auditable.

Your domain at a glance

• Security and Compliance Scope: Policies, standards and frameworks adoption
• Technical security oversight
• Vulnerability management
• Security operations and (major) incident management
• Security engineering
• Identity and (privileged) access governance
• Operational resilience and BCP/DRP
• IT compliance and controls management
• Data security and privacy

Managing the Domain

• Strategy: Strategizing, road mapping and annual planning
• Portfolio: Portfolio management
• People: Team and people management
• Finance: Financial management
• Vendors: Vendor management
• Quality: Quality assurance management

Key responsibilities

Leading the Security Function: Develop and implement a security strategy and roadmap and translate it into an annual plan prioritised against business needs, risks and available resources. Establish and embed security practices, processes and ways of working across MSIG Specialty Marine. Build and lead a small security team: define the capabilities required, support recruitment within agreed budgets, and develop your people. Take an active role in operational delivery, balancing team leadership with hands‑on involvement as the function develops. Work closely with the Head of IT to agree priorities, communicate resource requirements and manage delivery. Collaborate with relevant Group security and compliance colleagues to align local practices with wider requirements. Identify opportunities to improve security through practical, proportionate solutions suited to the size and needs of the business. Manage the security portfolio, budget, vendors and quality assurance so that delivery stays on track and offers value.

Governance, Risk and Compliance: Translate Group CISO policies into local security policies, standards and control expectations, and drive their adoption. Lead information security risk management and IT compliance and controls, in line with Group standards and regulatory requirements. Support internal and external audits, manage evidence and report security posture to Head Office and senior leadership.

Security Operations and Engineering: Oversee security operations delivered by internal teams and external SOC providers, including threat detection and monitoring. Lead security incident management, including major incidents, escalation and root cause analysis. Own vulnerability management and ensure risk‑based remediation. Embed security by design through architecture and design reviews, security engineering and secure software development (SSDLC).

Identity, Cloud and Resilience: Govern identity and privileged access, and set security baselines for Azure, Microsoft 365 and endpoints. Work with the Data Protection Officer to support data security and privacy. Define security requirements for business continuity, disaster recovery (BCP/DRP) and backup, and make sure plans are tested.

Lead third‑party security risk assessments and embed security requirements in procurement.

What we’re looking for

Experience establishing or developing a security function and translating priorities into practical delivery. The ability to combine strategic thinking with hands‑on operational work. Experience leading a small team and planning the skills and resources needed to deliver effectively. The ability to explain priorities, risks and resource needs clearly, translating technical risk into business language. Confidence working in an evolving environment, introducing structure and adapting as business needs develop. Extensive experience in information security governance, risk and compliance, and a track record engaging senior leadership and auditors.

Experience and qualifications

• Senior security experience in regulated industries (insurance, financial services or similar).
• Strong understanding of frameworks such as ISO 27001, NIST CSF, DORA and CIS Controls.
• Experience with cloud security (Azure), identity governance and Zero Trust architecture.
• Proven experience supporting regulatory compliance and audit programmes.
• Bachelor’s degree in Information Security, Cybersecurity, Computer Science or a related discipline.

Desirable certifications

• CISSP
• CISM
• CRISC
• ISO 27001 Lead Auditor or Lead Implementer

Why join MSIG Specialty Marine?

This is an opportunity to take on a strategic security leadership role within a growing international marine insurance business. You will build the security function and shape the organisation’s security governance, resilience and risk management capability, working closely with both senior leadership and technical teams to ensure security remains a key enabler of the business. If you’re looking for a role where you can influence strategy, strengthen security frameworks and make a real organisational impact, we would love to hear from you. In an uncertain world, we believe trust is built through consistency, care, and genuine collaboration. At MSIG Europe, we take the time to understand our clients’ needs and shape pragmatic solutions that truly protect their business. Guided by a people‑first vision rooted in our Japanese heritage, we’re here to build lasting relationships — grounded in trust, every day.

MSIG Europe is part of the top 10 global insurance provider MS&AD and has a long‑standing legacy of providing insurance solutions to companies of all sizes around the world. We understand and calculate risks to protect businesses and help mitigate the inevitable and varied challenges.

Headquartered in Brussels, Belgium

MSIG Europe operates from Belgium, France, Germany, Italy, the Netherlands, Slovakia, Spain and the UK.

Our Japanese heritage defines our guiding principles of respect, trust and care, and ensures the backbone of a strong global network.