Cyber Security Lead - Subsidiaries

This is a great job for someone who enjoys shaping cyber strategy, influencing senior stakeholders and leading teams to deliver meaningful business outcomes. You may already be leading cyber risk or governance activities within a large organisation and be ready for a broader, more strategic role with visibility across multiple businesses.

A bit about the job

Cyber security plays a vital role in helping our subsidiary businesses operate safely and confidently. As Cyber Security Lead for Subsidiaries, you'll shape and deliver the cyber strategy across our subsidiary organisations, making sure they are aligned with Aviva's cyber risk management framework while supporting their business goals. Working as part of the Group Cyber GRC and Oversight function, you'll partner with subsidiary technology and security teams, cyber specialists and operational security teams to strengthen governance and oversight, drive effective and proportionate risk management and support integration activity. You'll lead the operation of effective cyber risk governance across our subsidiaries, helping to create clear risk reporting, robust controls and proportionate approaches that reflect the size, maturity and risk profile of each business. Ultimately, you'll provide strategic direction and challenge, helping our subsidiaries manage cyber risk effectively while supporting Aviva's wider cyber strategy and commercial priorities.

Skills and experience we're looking for:

• Significant experience in cyber security, cyber risk, governance or security leadership roles, with the ability to shape strategy and deliver risk-based outcomes.
• Strong knowledge of cyber risk management and recognised frameworks such as NIST, ISO 27001 or CIS Controls, ideally within a regulated environment.
• Experience leading, coaching and developing high-performing teams, creating an inclusive culture where colleagues can grow and do their best work.
• Proven ability to build trusted relationships, influence senior stakeholders and communicate complex cyber risks clearly to both technical and non-technical audiences.
• Experience working across complex organisations, balancing business priorities with risk management, and supporting subsidiary governance, integration activity or transformation programmes would be beneficial.

What you’ll get for this role:

• Starting salary Circa £75k (depending on location, skills, experience, and qualifications).
• Bonus opportunity 12% – actual amount depends on your performance and Aviva’s generous pension scheme e.g. if you put in 8%, Aviva adds 14% in.
• 29 days holiday plus bank holidays, and you can choose to buy or sell up to 5 days.
• Aviva-funded Private Medical Benefit to help you get expert support when you need it.
• Make your money go further - Up to 40% discount on Aviva products, and other retailer discounts.
• Up to £1,200 of free Aviva shares per year through our Matching Share Plan and share in the success of Aviva with our Save As You Earn scheme.
• Brilliantly supportive policies including parental and carer’s leave.
• Flexible benefits to suit you, including sustainability options such as cycle to work.
• Make a difference, be part of our Aviva Communities and use your 3 paid volunteering days to help others.

Aviva is for everyone: We’re inclusive and welcome everyone – we want applications from all backgrounds and experiences. Excited but not sure you tick every box? Even if you don’t, we would still encourage you to apply. We also consider all forms of flexible working, including part time and job shares. We flex locations, hours and working patterns to suit our customers, business, and you. Most of our people are smart working – spending at least 50% of their time in our offices every week - combining the benefits of flexibility, with time together with colleagues.