IT Security & Compliance Manager

MSIG Specialty Marine is a leading Managing General Agent (MGA) delivering tailored marine insurance solutions to clients across the globe.

By combining multiple carrier options with A-rated capital strength, we provide flexible and innovative insurance solutions in a complex and rapidly evolving market.

With approximately 250 specialist professionals across Europe, we bring together one of the industry’s most experienced teams of underwriters, claims specialists and risk advisors. Our expertise spans eight core marine insurance product lines, supported by deep technical knowledge, market insight and a strong client first mindset.

Our ambition is simple: to be the world-class partner for marine insurance, combining technical excellence with exceptional service. From innovative risk solutions to trusted claims handling, we help our clients navigate uncertainty with confidence.

As IT Security & Compliance Manager at MSIG Specialty Marine, you will build and lead our security function, establishing the foundations, practices and team needed to support the business.

This role combines strategic direction, people leadership and hands-on delivery. Working closely with the Head of IT, you will have scope to shape our security approach, recommend priorities and implement practical improvements within the wider Group framework.

You will join a developing organisation within an established international group. The initial focus will be on establishing the function and embedding effective ways of working, which requires someone comfortable moving between planning, implementation and day-to-day operational responsibilities.

As the primary local interface with the Group CISO, you will ensure global security standards are adopted locally, own the security control framework, and make sure security is embedded by design, risks are proactively managed and controls remain effective and auditable.

Your domain at a glance

Security and Compliance Scope

- Policies, standards and frameworks adoption

- Technical security oversight

- Vulnerability management

- Security operations and (major) incident management

- Security engineering

- Identity and (privileged) access governance

- Operational resilience and BCP/DRP

- IT compliance and controls management

- Data security and privacy

Managing the Domain

- Strategy: Strategizing, road mapping and annual planning

- Portfolio: Portfolio management

- People: Team and people management

- Finance: Financial management

- Vendors: Vendor management

- Quality: Quality assurance management

Leading the Security Function

• Develop and implement a security strategy and roadmap and translate it into an annual plan prioritised against business needs, risks and available resources.
• Establish and embed security practices, processes and ways of working across MSIG Specialty Marine.
• Build and lead a small security team: define the capabilities required, support recruitment within agreed budgets, and develop your people.
• Take an active role in operational delivery, balancing team leadership with hands-on involvement as the function develops.
• Work closely with the Head of IT to agree priorities, communicate resource requirements and manage delivery.
• Collaborate with relevant Group security and compliance colleagues to align local practices with wider requirements.
• Identify opportunities to improve security through practical, proportionate solutions suited to the size and needs of the business.
• Manage the security portfolio, budget, vendors and quality assurance so that delivery stays on track and offers value.

Governance, Risk and Compliance

• Translate Group CISO policies into local security policies, standards and control expectations, and drive their adoption.
• Lead information security risk management and IT compliance and controls, in line with Group standards and regulatory requirements.
• Support internal and external audits, manage evidence and report security posture to Head Office and senior leadership.

Security Operations and Engineering

• Oversee security operations delivered by internal teams and external SOC providers, including threat detection and monitoring.
• Lead security incident management, including major incidents, escalation and root cause analysis.
• Own vulnerability management and ensure risk-based remediation.
• Embed security by design through architecture and design reviews, security engineering and secure software development (SSDLC).

Identity, Cloud and Resilience

• Govern identity and privileged access, and set security baselines for Azure, Microsoft 365 and endpoints.
• Work with the Data Protection Officer to support data security and privacy.
• Define security requirements for business continuity, disaster recovery (BCP/DRP) and backup, and make sure plans are tested.
• Lead third-party security risk assessments and embed security requirements in procurement.

• Experience establishing or developing a security function and translating priorities into practical delivery.
• The ability to combine strategic thinking with hands-on operational work.
• Experience leading a small team and planning the skills and resources needed to deliver effectively.
• The ability to explain priorities, risks and resource needs clearly, translating technical risk into business language.
• Confidence working in an evolving environment, introducing structure and adapting as business needs develop.
• Extensive experience in information security governance, risk and compliance, and a track record engaging senior leadership and auditors.
• Senior security experience in regulated industries (insurance, financial services or similar).
• Strong understanding of frameworks such as ISO 27001, NIST CSF, DORA and CIS Controls.
• Experience with cloud security (Azure), identity governance and Zero Trust architecture.
• Proven experience supporting regulatory compliance and audit programmes.
• Bachelor’s degree in Information Security, Cybersecurity, Computer Science or a related discipline.
• Desirable certifications: CISSP, CISM, CRISC, ISO 27001 Lead Auditor or Lead Implementer.

Why join MSIG Specialty Marine?

This is an opportunity to take on a strategic security leadership role within a growing international marine insurance business.

You will build the security function and shape the organisation’s security governance, resilience and risk management capability, working closely with both senior leadership and technical teams to ensure security remains a key enabler of the business.

If you’re looking for a role where you can influence strategy, strengthen security frameworks and make a real organisational impact, we would love to hear from you.