Information Security Consultant

Senior GRC Specialist – Global Insurance Firm

Financial Services | Hybrid – 2 Days Office | International Projects | Excellent Benefits & Pension

A leading global insurance organisation is continuing to strengthen its Governance, Risk & Compliance capabilities and is looking for experienced GRC specialists across several key areas of Technology and Cyber Risk.

You will have the opportunity to work across both local and international projects, collaborating with stakeholders and teams across the wider global organisation. The firm is interested in candidates who have developed a strong specialism in one or more of Third-Party Risk Management, Operational Resilience & NIS2, IT/Technology Risk or Information Security Governance.

You do not need to be an expert across every discipline; the focus is on bringing deep expertise within your respective area alongside a strong understanding of the wider GRC and Financial Services environment.

Key Areas of Expertise:

Depending on your specialism, responsibilities could include:

• Third-Party Risk / TPRM: Assessing technology and cyber risks across critical suppliers, outsourcing arrangements and third parties, including ongoing monitoring and control assurance.
• Operational Resilience & NIS2: Supporting resilience frameworks, critical business services, scenario testing, incident preparedness and regulatory requirements including NIS2.
• IT / Technology Risk: Identifying, assessing and challenging technology risks and controls, supporting risk assessments, remediation programmes and senior risk reporting.
• Information Security: Supporting Information Security governance, security policies, control frameworks, risk assessments and the continued development of the organisation's security posture.
• Working across local and international GRC, Technology Risk and Cyber Security projects within a global environment.
• Partnering with Technology, Cyber Security, Risk, Compliance and business stakeholders across different countries and business units.
• Supporting regulatory and audit activities and ensuring appropriate governance and remediation of identified control weaknesses.

Candidate Profile

Candidates should bring approximately 5–10 years of relevant experience, with previous experience within Financial Services essential – ideally Insurance, Banking, Asset Management or another highly regulated FS environment. You should have strong GRC knowledge combined with demonstrable expertise across at least one of Third-Party Risk, Operational Resilience/NIS2, IT Risk or Information Security, as well as the ability to engage and challenge senior stakeholders in an international environment.

Working Environment & Benefits

The organisation operates a flexible hybrid model with two days per week in the office and offers the opportunity to work internationally for up to one month per year. Alongside this flexibility, employees receive a strong overall benefits package, including an excellent pension, international project exposure and significant opportunities for long-term development within a global Financial Services organisation.