Cyber Security Architect

Job Type: Permanent

Build a brilliant future with Hiscox

Within Hiscox, you'll find a business in the middle of genuine transformation, with complex risks, demanding regulations, and when your business lines run from life‑and‑death kidnap situations to a basement of flooded Ferraris, it turns out the risk landscape is anything but dull.

Think cyber insurance, marine cargo, kidnap and ransom, high‑net‑worth individuals. And because we underwrite cyber risk, our security team has a direct line to real‑world threat intelligence that is the envy of most organisations.

The role:

The role is split between building the security capabilities that protect us day to day and working inside a $200m transformation programme to make sure we build new things securely from the start. You'll be sitting with technology teams, underwriters, operations leads, and senior stakeholders — getting your hands on the real problems their world creates: distributed data, agentic AI, supply chain risk. Our goal is to help the business succeed safely, not catch it out.

You will take the lead on a wide portfolio of projects, managing a range of engagements concurrently and providing direct security engagement and acting as an escalation point for more junior team members and across technology, data and business peers and stakeholders. You will be able to bring together an aggregate view of risk across your portfolio to manage security resources, report overall status to key stakeholders and provide clear recommendations for action.

You will help to ensure the safety and security of our business by designing, building, and implementing security solutions to protect us against sophisticated cyber threats. You will need to be able to translate business needs into pragmatic and effective security requirements and solutions.

What experience is needed:

• Security architecture across cloud environments, primarily Azure and GCP, with some AWS in the mix. Breadth over depth.
• Regulatory frameworks in financial services: FCA, Lloyd's, NYDFS. Bonus points for DORA, though it's so new it still squeaks.
• Designing successful security solutions and driving innovation. How have you evaluated, selected and supported the implementation of new technologies that have raised the bar in terms of capability.
• Communicating security in context: board, regulator, or room full of underwriters — one size rarely fits all.
• Enabling business strategies — how have you made a difference to the business by embedding pragmatic security solutions into business transformation with tangible outcomes.
• Automation‑first thinking: you don't need to be a developer, but hands‑on experience with scripting or coding builds credibility. Tell us what you've vibe coded and how it helped.
• Understanding the security implications of large‑scale data science and AI workloads, and making life easier for the people building them.

Diversity & Benefits

At Hiscox we care about our people. We hire the best people for the job and we're committed to diversity and creating a truly inclusive culture, which we believe drives success.

Working life doesn't always have to be in the office, so we have introduced hybrid working to encourage a healthy work life balance. This hybrid working model is set by the team rather than the business to enable you to manage your own personal work‑life balance.

We see it as the best of both worlds; structure and sociability on one hand, and independence and flexibility on the other.

Our benefits package includes a bonus, contributory pension, 25 days annual leave plus 2 Hiscox days and a 4 week paid sabbatical with every 5 years' worth of service, private medical for all the family and much more.

Salary commensurate with experience.

Work with amazing people and be part of a unique culture.