Cyber Security Architect

Hiscox•Lisbon, NY

5d•Hybrid

About The Position

The role is split between building the security capabilities that protect us day to day and working inside a $200m transformation programme to make sure we build new things securely from the start. You'll be sitting with technology teams, underwriters, operations leads, and senior stakeholders - getting your hands on the real problems their world creates: distributed data, agentic AI, supply chain risk. Our goal is to help the business succeed safely, not catch it out. You will take the lead on a wide portfolio of projects, managing a range of engagements concurrently and providing direct security engagement and acting as an escalation point for more junior team members and across technology, data and business peers and stakeholders. You will be able to bring together an aggregate view of risk across your portfolio to manage security resources, report overall status to key stakeholders and provide clear recommendations for action. You will help to ensure the safety and security of our business by designing, building, and implementing security solutions to protect us against sophisticated cyber threats. You will need to be able to translate business needs into pragmatic and effective security requirements and solutions.

Requirements

Security architecture across cloud environments, primarily Azure and GCP, with some AWS in the mix.
Experience with regulatory frameworks in financial services: FCA, Lloyd's, NYDFS.
Experience designing successful security solutions and driving innovation.
Experience communicating security in context to different audiences.
Experience enabling business strategies by embedding pragmatic security solutions into business transformation.
Automation-first thinking: hands-on experience with scripting or coding.
Understanding the security implications of large-scale data science and AI workloads.

Nice To Haves

DORA (as it is new)
Experience with scripting or coding (vibe coded and how it helped)

Responsibilities

Take the lead on a wide portfolio of projects, managing a range of engagements concurrently.
Provide direct security engagement and act as an escalation point for more junior team members and across technology, data and business peers and stakeholders.
Bring together an aggregate view of risk across your portfolio to manage security resources, report overall status to key stakeholders and provide clear recommendations for action.
Design, build, and implement security solutions to protect us against sophisticated cyber threats.
Translate business needs into pragmatic and effective security requirements and solutions.
Evaluate, select and support the implementation of new technologies that raise the bar in terms of capability.
Communicate security in context to various audiences including the board, regulators, or underwriters.
Embed pragmatic security solutions into business transformation with tangible outcomes.
Understand the security implications of large-scale data science and AI workloads.