Head of Information Technology & Chief Information Security Officer (Head of IT / CISO)

Location: Bermuda or EMEA

Verdant Rock is seeking an experienced Head of Information Technology & Chief Information Security Officer (Head of IT / CISO) to lead the delivery, operation, security and ongoing development of the company’s technology environment.

The successful candidate will be responsible for the company’s IT infrastructure, cybersecurity programme, data platforms and operational resilience arrangements, while also serving as the company’s Chief Information Security Officer.

Key Responsibilities

Lead the delivery, operation and ongoing development of Verdant Rock’s technology environment and IT architecture.
Own and deliver the company’s operational cyber risk management programme in the capacity of CISO.
Manage Microsoft 365, Entra ID, Intune, Purview, Defender, Sentinel and the company’s cloud-based technology environment.
Oversee identity and access management, cybersecurity controls, incident response, vulnerability management and security testing.
Administer and govern the company’s enterprise AI environment, including Claude Enterprise and related integrations.
Maintain appropriate data governance, business continuity, disaster recovery and operational resilience arrangements.
Oversee technology vendors, cloud providers and other material outsourced technology services.
Support technology-related regulatory reporting and compliance requirements applicable to a Bermuda-regulated insurer.
Provide regular technology and cyber risk reporting to senior management and, in the CISO capacity, to the Board or relevant Board committee.
Work closely with Risk, Compliance, Legal, Finance, Underwriting and AI & Data Analytics teams.
Personally design, build, secure and maintain in-house integrations, automations and AI connectors, including Microsoft Graph integrations and custom MCP servers.

Qualifications & Experience

A degree in Computer Science, Information Technology, Cybersecurity or a related discipline, or at least 8 years’ equivalent professional experience in these fields.
Minimum 8–10 years of progressively responsible experience in IT infrastructure, cloud platforms, identity and security operations, or technology risk.
At least 3 years of experience leading an IT function or team and 3 years of responsibility for information security management.
CISSP, CISM or equivalent recognised information security certification.
Strong hands-on experience administering Microsoft 365 E5, including Entra ID, Intune, Purview, Defender and Sentinel.
Hands-on experience designing and developing integrations and automations using Microsoft Graph.
Professional software engineering proficiency in at least one general-purpose language (Python, TypeScript or C#), together with PowerShell experience, and experience delivering production integrations end to end.
Hands-on experience building Model Context Protocol (MCP) servers or equivalent LLM tool-calling integrations, including secure authentication and enterprise AI platform integration.
Hands-on experience with Microsoft Azure, including App Service, Functions or Container Apps, Key Vault, managed identities, Log Analytics and CI/CD deployment.
Experience administering Claude Enterprise, including SSO, provisioning, access controls, security settings, audit logging, connectors and integrations.
Strong knowledge of cybersecurity, incident response, data governance, business continuity/disaster recovery, third-party risk and technology controls.
Experience within insurance, reinsurance, banking or another regulated financial-services environment is preferred.
Experience preparing Board-level reporting and supporting regulatory or audit requirements.

Location

The role may be based in Bermuda or EMEA, subject to the appropriate engagement structure and regulatory requirements. Candidates requiring a Bermuda work permit may also be considered. The successful candidate must be available to travel to Bermuda as required.

Similar jobs