Job Type: Permanent Build a brilliant future with Hiscox Job Description Position: Enterprise Security Architect Reporting to: Chief Information Security Officer (CISO) Location: London (preferable) or York, UK Type: Permanent Band: III Company description Hiscox is a diversified international insurance group with a powerful brand, strong balance sheet and plenty of room to grow. Listed on the London Stock Exchange and headquartered in Bermuda (with the bulk of group leadership sitting in London), Hiscox has over 3,000 staff across 14 countries and 34 offices. Structured by geography and product, Hiscox’s long-held business strategy has helped them grow from a niche Lloyd’s underwriter to an international insurance group with a powerful and trusted consumer brand. Hiscox is comprised of the following business units: London Market Reinsurance & Insurance Linked Securities (ILS) Hiscox Retail USA Hiscox Retail UK Hiscox Retail Europe For the financial year 2023, GWP grew to $4,598m with net premiums earned of $3,555m, returning a record pre-tax profit of £625.9M. At Hiscox, our corporate values are considered crucial to our success. They are: Courage ; dare to take a risk Human ; clear, fair, and inclusive Ownership ; passionate, commercial, and accountable Integrity ; do the right thing, however hard Connected ; together, build something better The Role The role of Enterprise Security Architect is to lead the development and implementation of our global cybersecurity strategy and architecture – ensuring alignment with our business strategy and objectives. You will be responsible for developing architecture roadmaps, patterns and blueprints, developing technical standards, defining requirements and control objectives, and consulting into various strategic security programmes and projects. You will also act as a cybersecurity subject matter expert and be responsible for overseeing the activities of security architects and business analysts. You will act as a bridge across all our federated business units, ensuring that our security architecture is consistent across all countries and systems. You will need to have excellent stakeholder management skills, and be highly consultative in your approach. You will need to communicate effectively to a variety of audiences with differing technical knowledge, including DevOps engineers and senior executives. The Enterprise Security Architect will work in the Office of the CISO, will report directly to the CISO and is a member of the Cyber Leadership Team (CLT). The role will be required to work in close collaboration with the CISO and the various CTOs across our business. The role is based in London or York (UK) and is a permanent position. Key Responsibilities Develop, implement and maintain our global cybersecurity strategy, enterprise security architecture and capability roadmaps. Develop, implement and maintain an enterprise security architecture framework. Develop, implement and maintain security architecture policies and processes. Develop, implement and maintain technical security standards. Provide security subject matter expertise and consultancy to delivery programmes and projects. Design and deliver a rolling programme of cyber capability maturity assessments. Provide technical leadership to a team of security architects (solution level) and business analysts. Provide technical advice and guidance to security and systems engineers. Plan and govern the delivery of security requirements and designs within programmes and projects. Provide security impact assessments within change control processes and boards. Continually review our security technologies, tools and services, and make recommendations on their improvement or replacement. Work with CTOs and other stakeholders across the business to identify architecture opportunities that can support cost saving, risk reduction or further enable our business goals. Acquire, train and retain cyber talent, with a focus on continuous professional development. Train and mentor security architects and business analysts, and build an environment that promotes knowledge sharing with other business teams. Candidate Profile Minimum of 8 years experience in enterprise and/or systems security architecture, with at least 3 years in a leadership role. Demonstrable experience developing and maintaining cyber strategies and roadmaps. Excellent knowledge of security frameworks, standards, and best practices (e.g., NIST, ISO, CIS, etc.). Excellent knowledge of security technologies, tools, and methodologies (e.g., firewalls, encryption, penetration testing, etc.). Excellent knowledge of enterprise security architecture principles and practices. Familiar with financial services (preferably insurance) security standards and regulatory requirements. Previous experience leading teams of security architects and/or business analysts. Excellent consulting skills and stakeholder management skills. Ability to design, plan, coordinate and deliver enterprise security capability roadmaps. Good leadership and team management skills, with the ability to motivate and develop staff and foster a culture of collaboration and technical excellence. Certified Information Systems Security Professional (CISSP), or equivalent certification is desirable. SABSA Certification is desirable. Diversity & Benefits At Hiscox we care about our people. We hire the best people for the job and we’re committed to diversity and creating a truly inclusive culture, which we believe drives success. Working life doesn’t always have to be in the office, so we have introduced hybrid working to encourage a healthy work life balance. This hybrid working model is set by the team rather than the business to enable you to manage your own personal work-life balance. We see it as the best of both worlds; structure and sociability on one hand, and independence and flexibility on the other. Our benefits package includes a bonus, contributory pension, 25 days annual leave plus 2 Hiscox days and a 4 week paid sabbatical with every 5 years’ worth of service, private medical for all the family and much more. LI-EB1 LI-HBRID Work with amazing people and be part of a unique culture