Head of Information Security — Insurance & Investments

Job Summary

The Head of Information Security leads the organization's information-security function, protecting technology systems, applications, networks, data, and digital services against cyber threats and operational security risks.

Within Insurance & Investments, the role focuses on information-security governance, cyber risk, security operations, identity and access management, vulnerability management, incident response, third-party security, cloud/application security, and regulatory compliance.

Key Responsibilities

Develop and implement the Information Security strategy, roadmap, policies, and standards.

Establish and maintain the organization's information-security governance framework.

Conduct enterprise-wide cybersecurity and information-security risk assessments.

Lead security operations, monitoring, threat detection, and incident response.

Oversee:

Security Operations Center (SOC)

SIEM

Threat Intelligence

Vulnerability Management

Penetration Testing

Identity & Access Management (IAM)

Privileged Access Management (PAM)

Network Security

Endpoint Security

Cloud Security

Application Security

Data Security

Develop and maintain information-security policies, procedures, controls, and standards.

Manage security incidents, investigations, containment, remediation, and post-incident reviews.

Establish vulnerability-management and security-testing programs.

Ensure appropriate access controls, authentication, MFA, segregation of duties, and least-privilege practices.

Protect sensitive customer, policyholder, financial, investment, employee, and corporate data.

Partner…