Head of Information Security — Insurance & Investments

Job Summary The Head of Information Security leads the organization's information-security function, protecting technology systems, applications, networks, data, and digital services against cyber threats and operational security risks. Within Insurance & Investments, the role focuses on information-security governance, cyber risk, security operations, identity and access management, vulnerability management, incident response, third-party security, cloud/application security, and regulatory compliance. Key Responsibilities Develop and implement the Information Security strategy, roadmap, policies, and standards. Establish and maintain the organization's information-security governance framework. Conduct enterprise-wide cybersecurity and information-security risk assessments. Lead security operations, monitoring, threat detection, and incident response. Oversee: Security Operations Center (SOC) SIEM Threat Intelligence Vulnerability Management Penetration Testing Identity & Access Management (IAM) Privileged Access Management (PAM) Network Security Endpoint Security Cloud Security Application Security Data Security Develop and maintain information-security policies, procedures, controls, and standards. Manage security incidents, investigations, containment, remediation, and post-incident reviews. Establish vulnerability-management and security-testing programs. Ensure appropriate access controls, authentication, MFA, segregation of duties, and least-privilege practice