Technology Risk Executive

Welcome to Hastings Direct. We're a digital insurance provider with a clear strategy to become the best and biggest player in the UK market. As a company, we've made huge investments in our technology, pricing, data and analytics capabilities over the past few years, along with nurturing our 4Cs culture and substantial investment in our people.

Role Overview: You will be supporting the Information Security manager in assuring Hastings' compliance with its regulatory and legal obligations, by working with the business to help to identify and manage our technology, information and cyber security risks. You'll also be supporting our Operational Resilience activities, undertaking due diligence on our third-party technology suppliers, and assisting with incidents and investigations. The role covers organisational security, people security, physical (site) security and technical security controls.

Skills Knowledge & Experience

• Cyber Security Knowledge: You'll have a sound understanding of cyber and information security, including frameworks like NIST and ISO IEC 27002:202. It will be great if you also know about PCI-DSS V4.0 as well.
• Clear Communication: You'll be able to discuss these with technical and non-technical stakeholders in a way which is accessible and understood.
• Threat landscape: You'll understand the current threat landscape in respect of Cyber, Privacy and Security risks, and how that applies to a company like Hastings.
• Analytical thinking: You'll be able to break down complex problems and be always looking for innovative, pragmatic solutions.
• Risk management: You'll have a good understanding of how to assess and manage technology risk. Even better if you have a solid understanding of Enterprise-Wide Risk frameworks.

Qualifications

• A security certification such as CISM, CISMP, CISSP or equivalent would be desirable.
• A relevant IT or security-based degree or equivalent practical experience.

Reward

• Salary: Attractive salary based on experience + car allowance (pay reviews also completed each year).
• Flexible Working: We champion a flexible and hybrid working approach so please speak to your recruiter to discuss in more detail, including days in the office and at home.
• Competitive Bonus Scheme: All colleagues are eligible for our annual 4Cs performance bonus, which is usually paid in March. The scheme is based on Hastings' performance against our business goals and your own personal performance.
• Physical Wellbeing: As a Band 4 colleague, Hastings pay for you to receive private medical Insurance (also known as PMI).
• Financial Wellbeing: As well as providing you with 4x your salary with our life assurance cover and income protection at no extra cost, pension contribution match up to 10%.
• Mental Wellbeing programme: At Hastings Direct we understand that mental health cannot not be scheduled, that's why we have a range of support to help you keep yourself well.
• There’s more! - 27 days annual leave + bank holidays, with the option to buy or sell one of your contracted weeks, access to our health care cash back plans, dental plans, discounted health assessments, Cycle to work and tech schemes, discounted and free onsite facilities, social events throughout the year and much more.

Hastings Group is an equal opportunities employer which means we treat people fairly. We welcome applications from all suitably skilled persons regardless of their gender, age, race, disability, ethnic background, religion/belief, sexual orientation, gender reassignment or marital/family status.