The Company Lab 1 is a fast-growing cybersecurity startup, which identifies and interprets exposed data on behalf of our clients. Lab 1's AI SaaS platform analyses the full corpus of exposed corporate data in near real time, providing customers with the assurance that they'll know the unknown and reducing the risk, cost and anxiety associated with exposed data across complex supply chains. Salary is industry competitive (dependent on skills and experience), after a qualifying period you may be eligible for a share in the company through an options grant. The Role Using the power of AI and Machine Learning, we deliver compromised data intelligence on any company within any supply chain. The data that powers those insights, a vast, messy, constantly changing corpus of exposed and compromised information, is the heart of our product. We are hiring a Senior Data Engineer to own and evolve the pipelines and data platform that turn raw exposed data into reliable, queryable intelligence. You will design, build and operate the batch and streaming systems that ingest, transform, model and serve data at scale, feeding our analytics, our ML models and our customer-facing platform. You will be the go-to expert for how data moves through Lab 1, working closely with founders, platform and software engineers in a small, friendly, international team. We are looking for a versatile and proactive engineer who cares deeply about data quality, correctness and scale. Your primary focus will be owning our data pipelines end to end, while also working alongside our ML efforts on the early stages of the training pipeline (data cleaning and feature engineering) to make sure our models are built on trustworthy, well-structured data As a core member of the engineering team, your mission will be to make our data trustworthy, timely and easy to build on.You will spend your time understanding how the team and our models consume data, architecting robust pipelines, and delivering clean, well-modelled datasets that let us ship high-quality intelligence faster and more safely. Your work will be the foundation that enables us to solve some of our most interesting, urgent, and taxing problems. You will report to the Chief Data Officer. Required demonstrable experience in: Designing, building and operating production data pipelines end to end, across both batch and streaming Strong Python for data engineering, including hands-on PySpark at scale (AWS EMR) Strong SQL modelling, transforming and querying large datasets Streaming data with Kafka Ingesting large, heterogeneous, unclean data from many sources and making it reliable Lakehouse and data warehousing patterns: Apache Iceberg, Athena, S3, columnar formats (ORC) Workflow orchestration with Airflow Search and indexing with OpenSearch Infrastructure as Code, specifically Terraform Managing core AWS services Building and maintaining CI/CD pipelines, ideally with GitHub Actions Data quality, observability, lineage and cost awareness through effective monitoring Supporting ML/AI workflows through data cleaning and feature engineering for training pipelines We primarily work with: Python (Poetry, migrating to uv) PySpark on AWS EMR SQL Kafka Athena + S3 / Apache Iceberg (ORC) OpenSearch Airflow AWS Terraform GitHub Actions Docker We are interested in candidates who value: Team working Delivering measurable high quality software Keeping sight of the big picture Friendly technical discussions and whiteboarding This is a great opportunity to join a fast growing company at an early stage and make a significant contribution. The role will be remunerated through a salary and, after a qualifying period, you will be granted a meaningful share in the company through an options grant. Candidates must have the right to work in the United Kingdom. The role is remote first with occasional in-person meetings in London (or Norwich). Benefits 1. Company pension 2. Company options scheme
24/08/2026
Full time
The Company Lab 1 is a fast-growing cybersecurity startup, which identifies and interprets exposed data on behalf of our clients. Lab 1's AI SaaS platform analyses the full corpus of exposed corporate data in near real time, providing customers with the assurance that they'll know the unknown and reducing the risk, cost and anxiety associated with exposed data across complex supply chains. Salary is industry competitive (dependent on skills and experience), after a qualifying period you may be eligible for a share in the company through an options grant. The Role Using the power of AI and Machine Learning, we deliver compromised data intelligence on any company within any supply chain. The data that powers those insights, a vast, messy, constantly changing corpus of exposed and compromised information, is the heart of our product. We are hiring a Senior Data Engineer to own and evolve the pipelines and data platform that turn raw exposed data into reliable, queryable intelligence. You will design, build and operate the batch and streaming systems that ingest, transform, model and serve data at scale, feeding our analytics, our ML models and our customer-facing platform. You will be the go-to expert for how data moves through Lab 1, working closely with founders, platform and software engineers in a small, friendly, international team. We are looking for a versatile and proactive engineer who cares deeply about data quality, correctness and scale. Your primary focus will be owning our data pipelines end to end, while also working alongside our ML efforts on the early stages of the training pipeline (data cleaning and feature engineering) to make sure our models are built on trustworthy, well-structured data As a core member of the engineering team, your mission will be to make our data trustworthy, timely and easy to build on.You will spend your time understanding how the team and our models consume data, architecting robust pipelines, and delivering clean, well-modelled datasets that let us ship high-quality intelligence faster and more safely. Your work will be the foundation that enables us to solve some of our most interesting, urgent, and taxing problems. You will report to the Chief Data Officer. Required demonstrable experience in: Designing, building and operating production data pipelines end to end, across both batch and streaming Strong Python for data engineering, including hands-on PySpark at scale (AWS EMR) Strong SQL modelling, transforming and querying large datasets Streaming data with Kafka Ingesting large, heterogeneous, unclean data from many sources and making it reliable Lakehouse and data warehousing patterns: Apache Iceberg, Athena, S3, columnar formats (ORC) Workflow orchestration with Airflow Search and indexing with OpenSearch Infrastructure as Code, specifically Terraform Managing core AWS services Building and maintaining CI/CD pipelines, ideally with GitHub Actions Data quality, observability, lineage and cost awareness through effective monitoring Supporting ML/AI workflows through data cleaning and feature engineering for training pipelines We primarily work with: Python (Poetry, migrating to uv) PySpark on AWS EMR SQL Kafka Athena + S3 / Apache Iceberg (ORC) OpenSearch Airflow AWS Terraform GitHub Actions Docker We are interested in candidates who value: Team working Delivering measurable high quality software Keeping sight of the big picture Friendly technical discussions and whiteboarding This is a great opportunity to join a fast growing company at an early stage and make a significant contribution. The role will be remunerated through a salary and, after a qualifying period, you will be granted a meaningful share in the company through an options grant. Candidates must have the right to work in the United Kingdom. The role is remote first with occasional in-person meetings in London (or Norwich). Benefits 1. Company pension 2. Company options scheme
Information Security & Assurance Officer Salary: up to 50,000 + 15% Project Uplift + Company Car/Car Allowance Location: Suffolk (onsite) REED Technology are recruiting for an Information Security & Assurance Officer to join a major UK infrastructure programme. This is a fantastic opportunity for an information security professional who enjoys balancing security governance, compliance and assurance with oversight of operational cyber security activities. You'll play a key role in maintaining the organisation's Information Security Management System (ISMS), ensuring compliance with recognised security frameworks, managing risk and assurance activities, and acting as a trusted adviser to both technical and non-technical stakeholders. This role would suit someone with experience in Information Security, GRC, Information Assurance or Cyber Security who is looking to develop their career within a highly regulated and complex environment. Key Responsibilities Own and maintain the Information Security Management System (ISMS) Ensure compliance with ISO 27001, GDPR and wider security governance requirements Develop and maintain security policies, standards and procedures Conduct security risk assessments and support internal and external audits Manage supplier and third-party security assurance activities Provide oversight of Microsoft 365 security controls, including identity and access management, MFA, endpoint protection and monitoring Work closely with SOC and security service providers to support incident management and response activities Produce security reports, dashboards and assurance documentation for senior stakeholders Deliver security awareness initiatives across the organisation Support continuous improvement of security controls, processes and governance frameworks About You We're interested in speaking with candidates who can demonstrate experience in: Information Security Governance, Risk and Compliance (GRC) Information Security Assurance and risk management ISO 27001 and Information Security Management Systems (ISMS) GDPR and data protection requirements Security audits, compliance reviews and assurance activities Supplier or third-party security assessments Security incident management and response processes Microsoft security technologies such as Defender, Sentinel, Entra ID or similar platforms Building strong relationships with stakeholders at all levels Desirable Experience Cyber Essentials or Cyber Essentials Plus NIST Cyber Security Framework Experience within infrastructure, utilities, energy, defence, engineering, financial services or other regulated sectors Professional certifications such as CISSP, CISM, ISO 27001 Lead Auditor/Implementer, Security+ or equivalent What's on Offer? 15% project uplift paid monthly Company car or car allowance Annual bonus Private medical insurance Life assurance Enhanced pension contributions 25 days annual leave plus bank holidays Additional holiday purchase scheme Professional memberships paid Ongoing training and development opportunities This is an excellent opportunity to join a high-profile programme where you'll have real ownership of information security governance and assurance, while contributing to the success of a nationally significant project. If you are interested, apply using the link provided.
21/08/2026
Full time
Information Security & Assurance Officer Salary: up to 50,000 + 15% Project Uplift + Company Car/Car Allowance Location: Suffolk (onsite) REED Technology are recruiting for an Information Security & Assurance Officer to join a major UK infrastructure programme. This is a fantastic opportunity for an information security professional who enjoys balancing security governance, compliance and assurance with oversight of operational cyber security activities. You'll play a key role in maintaining the organisation's Information Security Management System (ISMS), ensuring compliance with recognised security frameworks, managing risk and assurance activities, and acting as a trusted adviser to both technical and non-technical stakeholders. This role would suit someone with experience in Information Security, GRC, Information Assurance or Cyber Security who is looking to develop their career within a highly regulated and complex environment. Key Responsibilities Own and maintain the Information Security Management System (ISMS) Ensure compliance with ISO 27001, GDPR and wider security governance requirements Develop and maintain security policies, standards and procedures Conduct security risk assessments and support internal and external audits Manage supplier and third-party security assurance activities Provide oversight of Microsoft 365 security controls, including identity and access management, MFA, endpoint protection and monitoring Work closely with SOC and security service providers to support incident management and response activities Produce security reports, dashboards and assurance documentation for senior stakeholders Deliver security awareness initiatives across the organisation Support continuous improvement of security controls, processes and governance frameworks About You We're interested in speaking with candidates who can demonstrate experience in: Information Security Governance, Risk and Compliance (GRC) Information Security Assurance and risk management ISO 27001 and Information Security Management Systems (ISMS) GDPR and data protection requirements Security audits, compliance reviews and assurance activities Supplier or third-party security assessments Security incident management and response processes Microsoft security technologies such as Defender, Sentinel, Entra ID or similar platforms Building strong relationships with stakeholders at all levels Desirable Experience Cyber Essentials or Cyber Essentials Plus NIST Cyber Security Framework Experience within infrastructure, utilities, energy, defence, engineering, financial services or other regulated sectors Professional certifications such as CISSP, CISM, ISO 27001 Lead Auditor/Implementer, Security+ or equivalent What's on Offer? 15% project uplift paid monthly Company car or car allowance Annual bonus Private medical insurance Life assurance Enhanced pension contributions 25 days annual leave plus bank holidays Additional holiday purchase scheme Professional memberships paid Ongoing training and development opportunities This is an excellent opportunity to join a high-profile programme where you'll have real ownership of information security governance and assurance, while contributing to the success of a nationally significant project. If you are interested, apply using the link provided.
Chief Technology Officer Location: North Somerset Salary: Competitive We are seeking a Chief Technology Officer (CTO) to join our clients Executive Leadership Team. The CTO will be instrumental in defining and delivering technology strategy, ensuring technology acts as a strategic enabler of growth, operational excellence, and competitive advantage. This role combines leadership across all technology capabilities with responsibility for driving digital transformation, automation, and the effective adoption of artificial intelligence throughout the business. Day-to-Day of the Role: Develop and maintain the organisation's technology strategy and roadmap. Provide strategic technology leadership to the Executive Team and identify opportunities to improve business performance through technology, automation, and innovation. Lead technology governance, architecture, and standards across the organisation. Ensure technology services remain secure, reliable, scalable, and fit for future business requirements. Own the strategy, development, integration, and ongoing effectiveness of enterprise business applications supporting key business functions. Lead the organisation's AI and automation strategy, ensuring successful adoption of emerging technologies. Drive technology-driven transformation initiatives across the organisation to modernise business processes and enhance customer experience. Manage technology budgets, resources, and strategic supplier relationships. Required Skills & Qualifications: Strategic technology leader with the ability to define and deliver a technology roadmap that supports business objectives. Strong commercial awareness with experience in managing budgets and ensuring technology investments deliver measurable business value. Deep understanding of technology operations, cyber security, enterprise applications, and data management in a secure, scalable environment. Proven ability to lead enterprise business systems and create an integrated technology ecosystem. Strong understanding of AI, automation, and emerging technologies, with the ability to manage risks and embed innovation across the organisation. Experience in digital transformation and partnering with functional leaders to improve operational performance. Excellent communication skills, able to engage with executives, technical teams, and stakeholders effectively. Leadership skills with the ability to build technical capability, develop future leaders, and establish a culture of innovation and continuous improvement. If you are interested in this position please apply online or contact me on for more information
12/08/2026
Full time
Chief Technology Officer Location: North Somerset Salary: Competitive We are seeking a Chief Technology Officer (CTO) to join our clients Executive Leadership Team. The CTO will be instrumental in defining and delivering technology strategy, ensuring technology acts as a strategic enabler of growth, operational excellence, and competitive advantage. This role combines leadership across all technology capabilities with responsibility for driving digital transformation, automation, and the effective adoption of artificial intelligence throughout the business. Day-to-Day of the Role: Develop and maintain the organisation's technology strategy and roadmap. Provide strategic technology leadership to the Executive Team and identify opportunities to improve business performance through technology, automation, and innovation. Lead technology governance, architecture, and standards across the organisation. Ensure technology services remain secure, reliable, scalable, and fit for future business requirements. Own the strategy, development, integration, and ongoing effectiveness of enterprise business applications supporting key business functions. Lead the organisation's AI and automation strategy, ensuring successful adoption of emerging technologies. Drive technology-driven transformation initiatives across the organisation to modernise business processes and enhance customer experience. Manage technology budgets, resources, and strategic supplier relationships. Required Skills & Qualifications: Strategic technology leader with the ability to define and deliver a technology roadmap that supports business objectives. Strong commercial awareness with experience in managing budgets and ensuring technology investments deliver measurable business value. Deep understanding of technology operations, cyber security, enterprise applications, and data management in a secure, scalable environment. Proven ability to lead enterprise business systems and create an integrated technology ecosystem. Strong understanding of AI, automation, and emerging technologies, with the ability to manage risks and embed innovation across the organisation. Experience in digital transformation and partnering with functional leaders to improve operational performance. Excellent communication skills, able to engage with executives, technical teams, and stakeholders effectively. Leadership skills with the ability to build technical capability, develop future leaders, and establish a culture of innovation and continuous improvement. If you are interested in this position please apply online or contact me on for more information
Thomson Reuters is seeking an experienced Privacy Operations Manager to join our General Counsel's Office. Reporting to the Chief Privacy Officer, this role presents an exciting opportunity to operationalize our global privacy program across Thomson Reuters. This role will lead a team of privacy operations specialists and be responsible for implementing privacy policies, managing day-to-day privacy operations, and ensuring compliance with global data protection and cybersecurity regulations including regional (GDPR, NIS2, Digital Services/Markets Act), federal (PIPEDA, UK GDPR), U.S. State (CCPA), provincial (Quebec's Law 25) and sectoral (HIPAA, GLBA, FedRamp, CJIS, etc.) privacy regulation, and other applicable data protection laws. This role will also manage the operational aspects of cyber incident management, coordinate incident response activities and ensuring effective execution of the organization's cyber incident response processes. The ideal candidate will bridge the gap between privacy law, technology and strategy, working cross-functionally to embed privacy practices throughout the organization and drive automation, leveraging the use of AI and other tools to operationalize privacy compliance across products, services and functions. About the Role In this opportunity as a Privacy Operations Manager, you will lead: Privacy Program Management Oversee the day-to-day operations of Thomson Reuters' global privacy program Implement privacy policies, procedures, and operational frameworks Conduct or facilitate the conduct of risk assessments, including - privacy impact assessments (PIAs) data protection impact assessments (DPIAs), transfer impact assessments (TIAs) Coordinate responses to data subject access requests (DSARs) and ensure timely resolution Track and report on privacy program metrics and KPIs Privacy Compliance & Risk Management Track and report changes in new/existing privacy regulations and monitor compliance with key regulations including GDPR, CCPA, PIPEDA, among others Build out and maintain data inventory, and data mapping initiatives Identify privacy risks and work with stakeholders to implement mitigation strategies Support privacy incident response and breach notification processes Conduct privacy audits and assessments of internal processes and third-party vendors Cyber Incident Management Support the day-to-day operational execution of the cyber incident response program, including intake, triage, and escalation of security incidents with privacy implications Support cross-functional co-ordination with Information Security, IT, Legal, and Business teams during active incidents to ensure timely containment, remediation, and communication Support legal assessment of incidents to determine breach notification obligations under applicable privacy and data protection regulations, and drive timely notification to affected individuals and regulators Maintain and continuously improve incident response playbooks, runbooks, and operational procedures for cyber incidents Privacy-by-Design and Cross-Functional Collaboration Partner with Legal, Information Security, IT, Product, and Business teams to integrate and operationalize privacy-by-design principles and guidance into the product development cycle. Serve as a privacy subject matter expert and advisor to business units Facilitate privacy training and awareness programs for employees Work with vendors and partners to ensure contractual privacy obligations are met Identify current sub-processor's and updating contractual documentation to reflect current state Documentation & Reporting Maintain records of processing activities (ROPA) and privacy documentation
06/08/2026
Full time
Thomson Reuters is seeking an experienced Privacy Operations Manager to join our General Counsel's Office. Reporting to the Chief Privacy Officer, this role presents an exciting opportunity to operationalize our global privacy program across Thomson Reuters. This role will lead a team of privacy operations specialists and be responsible for implementing privacy policies, managing day-to-day privacy operations, and ensuring compliance with global data protection and cybersecurity regulations including regional (GDPR, NIS2, Digital Services/Markets Act), federal (PIPEDA, UK GDPR), U.S. State (CCPA), provincial (Quebec's Law 25) and sectoral (HIPAA, GLBA, FedRamp, CJIS, etc.) privacy regulation, and other applicable data protection laws. This role will also manage the operational aspects of cyber incident management, coordinate incident response activities and ensuring effective execution of the organization's cyber incident response processes. The ideal candidate will bridge the gap between privacy law, technology and strategy, working cross-functionally to embed privacy practices throughout the organization and drive automation, leveraging the use of AI and other tools to operationalize privacy compliance across products, services and functions. About the Role In this opportunity as a Privacy Operations Manager, you will lead: Privacy Program Management Oversee the day-to-day operations of Thomson Reuters' global privacy program Implement privacy policies, procedures, and operational frameworks Conduct or facilitate the conduct of risk assessments, including - privacy impact assessments (PIAs) data protection impact assessments (DPIAs), transfer impact assessments (TIAs) Coordinate responses to data subject access requests (DSARs) and ensure timely resolution Track and report on privacy program metrics and KPIs Privacy Compliance & Risk Management Track and report changes in new/existing privacy regulations and monitor compliance with key regulations including GDPR, CCPA, PIPEDA, among others Build out and maintain data inventory, and data mapping initiatives Identify privacy risks and work with stakeholders to implement mitigation strategies Support privacy incident response and breach notification processes Conduct privacy audits and assessments of internal processes and third-party vendors Cyber Incident Management Support the day-to-day operational execution of the cyber incident response program, including intake, triage, and escalation of security incidents with privacy implications Support cross-functional co-ordination with Information Security, IT, Legal, and Business teams during active incidents to ensure timely containment, remediation, and communication Support legal assessment of incidents to determine breach notification obligations under applicable privacy and data protection regulations, and drive timely notification to affected individuals and regulators Maintain and continuously improve incident response playbooks, runbooks, and operational procedures for cyber incidents Privacy-by-Design and Cross-Functional Collaboration Partner with Legal, Information Security, IT, Product, and Business teams to integrate and operationalize privacy-by-design principles and guidance into the product development cycle. Serve as a privacy subject matter expert and advisor to business units Facilitate privacy training and awareness programs for employees Work with vendors and partners to ensure contractual privacy obligations are met Identify current sub-processor's and updating contractual documentation to reflect current state Documentation & Reporting Maintain records of processing activities (ROPA) and privacy documentation
AXA XL is an Equal Opportunity Employer. Chief Enterprise Architect Location: UK / US AXA XL's Chief Enterprise Architect is a key senior executive, leadership team role in the Technology & AI function, accountable for defining and governing the enterprise-wide architecture vision, ensuring our business strategy is translated into an integrated technology, data, and capability roadmap. This role drives simplification, modernization, resilience, and value through architecture-led decision making, transforming to AI-based architecture. The role reports to AXA XL's Chief Technology & AI Officer. What you'll be doing Enterprise Architecture Strategy & Vision Define and maintain the enterprise target architecture aligned to AXA XL's business strategy. Lead creation of multi-year architecture roadmaps across business, data, application, and infrastructure domains. Ensure architectural decisions support growth, customer experience, operational efficiency, and regulatory requirements. Own the enterprise AI architecture strategy, ensuring AI capabilities, platforms, data, governance and responsible controls are designed to scale securely while delivering measurable business value Architecture Governance & Standards Establish and run enterprise architecture governance (design authorities, standards, patterns, guardrails). Approve or challenge major technology and platform decisions, ensuring architecture is consistent across portfolios, programs, and delivery teams. Technology Simplification & Modernization Drive reduction of technical duplication, and complexity across the enterprise. Lead rationalization of application estates and platform portfolios, in addition to guiding cloud migration strategy and legacy modernization priorities. Business & Capability Architecture Translate AXA XL's business strategy into capability maps and operating model requirements. Partner with senior business leaders to define capability gaps and investment priorities. Build e2e integrated AI-based architecture and ensure engineering executes using this agreed architecture. Ensure technology investment is anchored in business outcomes. Data, Integration & Platform Architecture Define enterprise integration principles (API strategy, event-driven architecture, interoperability). Align data architecture with enterprise data strategy, governance, and analytics needs. Define and keep Enterprise Architecture principles current, ensuring principles are embedded in the governance (architecture review, sourcing and procurement, AI, engineering) while promoting reuse of platforms, components, and shared services. Security, Risk & Resilience by Design Ensure security and operational resilience are embedded in architecture standards; resulting in security, AI and privacy by design. Work with CISO, risk and compliance teams to ensure architecture meets regulatory expectations. Drive architecture decisions that reduce systemic technology risk. What you'll bring We're looking for someone who has these abilities and skills: Required Skills and Abilities: Deep expertise and hands on experience in e2e business and technology capability architecture with embedded security/privacy/AI. with a track record of success in the areas of delivery high impact learning and development solutions and operations Leadership experience in managing high performing teams who are autonomous, empowered and strive for excellence to serve a global scope Extensive critical thinking, systems thinking and problem solving skills, with the ability to continually seek to improve, create efficiencies and optimize service delivery Data and insight driven, the ability to make robust decisions and drive measurable outcomes Effective oral/written communication skills to be able to engage multiple stakeholders in driving change and embedding new processes/practices. What we offer Inclusion AXA XL is committed to equal employment opportunity and will consider applicants regardless of gender, sexual orientation, age, ethnicity and origins, marital status, religion, disability, or any other protected characteristic. At AXA XL, we know that an inclusive culture enables business growth and is critical to our success. That's why we have made a strategic commitment to attract, develop, advance and retain the most inclusive workforce possible, and create a culture where everyone can bring their full selves to work and reach their highest potential. It's about helping one another - and our business - to move forward and succeed. Five Business Resource Groups focused on gender, LGBTQ+, ethnicity and origins, disability and inclusion with 20 Chapters around the globe. Robust support for Flexible Working Arrangements Enhanced family friendly leave benefits Named to the Diversity Best Practices Index Signatory to the UK Women in Finance Charter Learn more at AXA XL is an Equal Opportunity Employer. Total Rewards AXA XL's Reward program is designed to take care of what matters most to you, covering the full picture of your health, wellbeing, lifestyle and financial security. It provides competitive compensation and personalized, inclusive benefits that evolve as you do. We're committed to rewarding your contribution for the long term, so you can be your best self today and look forward to the future with confidence. Sustainability At AXA XL, Sustainability is integral to our business strategy. In an ever-changing world, AXA XL protects what matters most for our clients and communities. We know that sustainability is at the root of a more resilient future. Our 2023-26 Sustainability strategy, called "Roots of resilience", focuses on protecting natural ecosystems, addressing climate change, and embedding sustainable practices across our operations. Our Pillars: Valuing nature: How we impact nature affects how nature impacts us. Resilient ecosystems - the foundation of a sustainable planet and society - are essential to our future. We're committed to protecting and restoring nature - from mangrove forests to the bees in our backyard - by increasing biodiversity awareness and inspiring clients and colleagues to put nature at the heart of their plans. Addressing climate change: The effects of a changing climate are far-reaching and significant. Unpredictable weather, increasing temperatures, and rising sea levels cause both social inequalities and environmental disruption. We're building a net zero strategy, developing insurance products and services, and mobilizing to advance thought leadership and investment in societal led solutions. Integrating ESG: All companies have a role to play in building a more resilient future. Incorporating ESG considerations into our internal processes and practices builds resilience from the roots of our business. We are training our colleagues, engaging our external partners, and evolving our sustainability governance and reporting. AXA Hearts in Action: We have established volunteering and charitable giving programs to help colleagues support causes that matter most to them, known as AXA XL's "Hearts in Action" programs. These include our Matching Gifts program, Volunteering Leave, and our annual volunteering day - the Global Day of Giving. For more information, please see The U.S. base salary range for this position is $275,000 to $300,000 USD. AXA XL is a global Company. The salary range noted above is applicable only for US applicants. Actual pay will be determined based upon the individual's skills, experience and location. We strive for market alignment and internal equity with our colleagues' pay. At AXA XL, we know how important physical, mental, and financial health are to our employees, which is why we are proud to offer benefits such as a competitive retirement savings plan, health and wellness programs, and many other benefits. We also believe in fostering our colleagues' development and offer a wide range of learning opportunities for colleagues to hone their professional skills and to position themselves for the next step of their careers. Who we are AXA XL, the P&C and specialty risk division of AXA, is known for solving complex risks. For mid sized companies, multinationals and even some inspirational individuals we don't just provide re/insurance, we reinvent it. How? By combining a comprehensive and efficient capital platform, data driven insights, leading technology, and the best talent in an agile and inclusive workspace, empowered to deliver top client service across all our lines of business property, casualty, professional, financial lines and specialty. With an innovative and flexible approach to risk solutions, we partner with those who move the world forward. Learn more at
05/08/2026
Full time
AXA XL is an Equal Opportunity Employer. Chief Enterprise Architect Location: UK / US AXA XL's Chief Enterprise Architect is a key senior executive, leadership team role in the Technology & AI function, accountable for defining and governing the enterprise-wide architecture vision, ensuring our business strategy is translated into an integrated technology, data, and capability roadmap. This role drives simplification, modernization, resilience, and value through architecture-led decision making, transforming to AI-based architecture. The role reports to AXA XL's Chief Technology & AI Officer. What you'll be doing Enterprise Architecture Strategy & Vision Define and maintain the enterprise target architecture aligned to AXA XL's business strategy. Lead creation of multi-year architecture roadmaps across business, data, application, and infrastructure domains. Ensure architectural decisions support growth, customer experience, operational efficiency, and regulatory requirements. Own the enterprise AI architecture strategy, ensuring AI capabilities, platforms, data, governance and responsible controls are designed to scale securely while delivering measurable business value Architecture Governance & Standards Establish and run enterprise architecture governance (design authorities, standards, patterns, guardrails). Approve or challenge major technology and platform decisions, ensuring architecture is consistent across portfolios, programs, and delivery teams. Technology Simplification & Modernization Drive reduction of technical duplication, and complexity across the enterprise. Lead rationalization of application estates and platform portfolios, in addition to guiding cloud migration strategy and legacy modernization priorities. Business & Capability Architecture Translate AXA XL's business strategy into capability maps and operating model requirements. Partner with senior business leaders to define capability gaps and investment priorities. Build e2e integrated AI-based architecture and ensure engineering executes using this agreed architecture. Ensure technology investment is anchored in business outcomes. Data, Integration & Platform Architecture Define enterprise integration principles (API strategy, event-driven architecture, interoperability). Align data architecture with enterprise data strategy, governance, and analytics needs. Define and keep Enterprise Architecture principles current, ensuring principles are embedded in the governance (architecture review, sourcing and procurement, AI, engineering) while promoting reuse of platforms, components, and shared services. Security, Risk & Resilience by Design Ensure security and operational resilience are embedded in architecture standards; resulting in security, AI and privacy by design. Work with CISO, risk and compliance teams to ensure architecture meets regulatory expectations. Drive architecture decisions that reduce systemic technology risk. What you'll bring We're looking for someone who has these abilities and skills: Required Skills and Abilities: Deep expertise and hands on experience in e2e business and technology capability architecture with embedded security/privacy/AI. with a track record of success in the areas of delivery high impact learning and development solutions and operations Leadership experience in managing high performing teams who are autonomous, empowered and strive for excellence to serve a global scope Extensive critical thinking, systems thinking and problem solving skills, with the ability to continually seek to improve, create efficiencies and optimize service delivery Data and insight driven, the ability to make robust decisions and drive measurable outcomes Effective oral/written communication skills to be able to engage multiple stakeholders in driving change and embedding new processes/practices. What we offer Inclusion AXA XL is committed to equal employment opportunity and will consider applicants regardless of gender, sexual orientation, age, ethnicity and origins, marital status, religion, disability, or any other protected characteristic. At AXA XL, we know that an inclusive culture enables business growth and is critical to our success. That's why we have made a strategic commitment to attract, develop, advance and retain the most inclusive workforce possible, and create a culture where everyone can bring their full selves to work and reach their highest potential. It's about helping one another - and our business - to move forward and succeed. Five Business Resource Groups focused on gender, LGBTQ+, ethnicity and origins, disability and inclusion with 20 Chapters around the globe. Robust support for Flexible Working Arrangements Enhanced family friendly leave benefits Named to the Diversity Best Practices Index Signatory to the UK Women in Finance Charter Learn more at AXA XL is an Equal Opportunity Employer. Total Rewards AXA XL's Reward program is designed to take care of what matters most to you, covering the full picture of your health, wellbeing, lifestyle and financial security. It provides competitive compensation and personalized, inclusive benefits that evolve as you do. We're committed to rewarding your contribution for the long term, so you can be your best self today and look forward to the future with confidence. Sustainability At AXA XL, Sustainability is integral to our business strategy. In an ever-changing world, AXA XL protects what matters most for our clients and communities. We know that sustainability is at the root of a more resilient future. Our 2023-26 Sustainability strategy, called "Roots of resilience", focuses on protecting natural ecosystems, addressing climate change, and embedding sustainable practices across our operations. Our Pillars: Valuing nature: How we impact nature affects how nature impacts us. Resilient ecosystems - the foundation of a sustainable planet and society - are essential to our future. We're committed to protecting and restoring nature - from mangrove forests to the bees in our backyard - by increasing biodiversity awareness and inspiring clients and colleagues to put nature at the heart of their plans. Addressing climate change: The effects of a changing climate are far-reaching and significant. Unpredictable weather, increasing temperatures, and rising sea levels cause both social inequalities and environmental disruption. We're building a net zero strategy, developing insurance products and services, and mobilizing to advance thought leadership and investment in societal led solutions. Integrating ESG: All companies have a role to play in building a more resilient future. Incorporating ESG considerations into our internal processes and practices builds resilience from the roots of our business. We are training our colleagues, engaging our external partners, and evolving our sustainability governance and reporting. AXA Hearts in Action: We have established volunteering and charitable giving programs to help colleagues support causes that matter most to them, known as AXA XL's "Hearts in Action" programs. These include our Matching Gifts program, Volunteering Leave, and our annual volunteering day - the Global Day of Giving. For more information, please see The U.S. base salary range for this position is $275,000 to $300,000 USD. AXA XL is a global Company. The salary range noted above is applicable only for US applicants. Actual pay will be determined based upon the individual's skills, experience and location. We strive for market alignment and internal equity with our colleagues' pay. At AXA XL, we know how important physical, mental, and financial health are to our employees, which is why we are proud to offer benefits such as a competitive retirement savings plan, health and wellness programs, and many other benefits. We also believe in fostering our colleagues' development and offer a wide range of learning opportunities for colleagues to hone their professional skills and to position themselves for the next step of their careers. Who we are AXA XL, the P&C and specialty risk division of AXA, is known for solving complex risks. For mid sized companies, multinationals and even some inspirational individuals we don't just provide re/insurance, we reinvent it. How? By combining a comprehensive and efficient capital platform, data driven insights, leading technology, and the best talent in an agile and inclusive workspace, empowered to deliver top client service across all our lines of business property, casualty, professional, financial lines and specialty. With an innovative and flexible approach to risk solutions, we partner with those who move the world forward. Learn more at
AXA XL is an Equal Opportunity Employer. Head of Technology & AI, UK & Lloyd's and Enabling Functions Locations: UK AXA XL's Head of Technology & AI, UK & Lloyd's and Enabling Functions is a key senior executive, leadership team role in the Technology & AI function, accountable for acting as the strategic technology and AI partner to deliver for UK & Lloyd's and Enabling Functions' executive leadership team, in cooperation with the Tech & AI organization. The role ensures business strategy is translated into a coherent technology and AI roadmaps, aligning investment, engineering capacity, operating model change, and measurable outcomes. This leader shapes demand, challenges priorities, drives decision-making, and ensures delivery accountability within the Technology & AI function for UK & Lloyd's and Enabling Functions. Operating as a trusted executive peer, balancing innovation with value, risk, regulatory requirements, and operational resilience, this role reports to AXA XL's Chief Technology & AI Officer with a dotted line to Chief Executive Officer, UK & Lloyd's. What you'll be doing Executive Technology & AI Leadership Act as the primary technology and AI partner to the UK & Lloyd's and Enabling Functions shaping business direction through technology-led opportunities. Provide insights on AI disruption, competitor landscape, and modern digital and AI business models relevant to insurance. Translate complex technology concepts into commercial and operational implications for executive decision-making. Strategy-to-Execution Translation Convert business strategy into a prioritized and funded technology and AI roadmap. Define the sequencing of initiatives based on value, feasibility, regulatory constraints, and delivery capacity. Ensure roadmaps integrate digital, data, AI, automation, and core platform modernization. Drive robust partnerships within the Tech & AI leadership team to ensure common principles, frameworks and guidelines are deployed and executed with effective coordination across all disciplines in the function. Enterprise Alignment & Investment Governance Represent UK & Lloyd's and Enabling Functions' needs into enterprise technology investment forums. Own business unit-level investment cases, ensuring clarity of ROI, outcomes, and measurable benefits. Challenge the business on value definition and ensure initiatives meet enterprise architecture, security, and AI governance requirements. Portfolio Ownership & Delivery Oversight Own the technology and AI portfolio for UK & Lloyd's and Enabling Functions, ensuring delivery performance, dependencies, and risks are actively managed. Hold delivery teams accountable for execution outcomes while ensuring the business fulfils its accountabilities (SMEs, process change, adoption). Provide clear reporting to Global Leadership Team partner(s) on delivery confidence, risks, financial position, and benefits tracking. Stakeholder Management & Executive Influence Challenging and influencing senior stakeholders with poise and composure, facilitating decision-making forums, resolving prioritization conflicts and driving outcomes. Build alignment across business functions including underwriting, claims, pricing, finance, customer operations, and distribution. AI Adoption & Business Transformation Drive enterprise AI adoption within the business unit, ensuring: high-value use cases are identified adoption and operating model impacts are planned workforce readiness is supported human-in-the-loop and control frameworks are implemented Ensure AI is embedded into workflows rather than delivered as standalone tools. Risk, Resilience & Regulatory Partnership Partner with Risk, Compliance, Legal, and Security to ensure delivery aligns to regulatory and control requirements. Ensure AI initiatives comply with Responsible AI, privacy, and model risk expectations. Ensure technology resilience and service continuity risks are visible and actively managed. Commercial and Vendor Leadership Partner with Procurement and Technology leadership to shape vendor strategy aligned to business unit priorities. Support contract negotiations, supplier performance management, and strategic partnerships. Ensure commercial outcomes align to delivery outcomes and service performance. What you'll bring We're looking for someone who has these abilities and skills: Commercial Acumen Keen understanding of business strategy, financial drivers, and operational performance levers. Able to challenge executives constructively and influence investment decisions. Technology & AI Leadership Deep understanding of enterprise technology including: product engineering and agile delivery cloud platforms and modern architecture data platforms and AI enablement automation and workflow transformation Excellent ability to evaluate AI opportunities pragmatically (value, feasibility, risk). Delivery & Portfolio Discipline Outstanding portfolio and programme oversight capability. Ability to balance competing priorities, resource constraints, and dependencies. Robust governance, reporting, and delivery confidence management. Risk & Regulatory Mindset (Insurance Context) Keen understanding of regulated environments and technology control frameworks. Awareness of Responsible AI, data privacy, and model risk management principles. Relationship Management & Leadership Ability to build deep trust across business and technology Excellent conflict resolution skills and ability to drive alignment across competing agendas. What we offer Inclusion AXA XL is committed to equal employment opportunity and will consider applicants regardless of gender, sexual orientation, age, ethnicity and origins, marital status, religion, disability, or any other protected characteristic. At AXA XL, we know that an inclusive culture enables business growth and is critical to our success. That's why we have made a strategic commitment to attract, develop, advance and retain the most inclusive workforce possible, and create a culture where everyone can bring their full selves to work and reach their highest potential. It's about helping one another - and our business - to move forward and succeed. Five Business Resource Groups focused on gender, LGBTQ+, ethnicity and origins, disability and inclusion with 20 Chapters around the globe. Robust support for Flexible Working Arrangements Enhanced family-friendly leave benefits Named to the Diversity Best Practices Index Signatory to the UK Women in Finance Charter Learn more at AXA XL is an Equal Opportunity Employer. Total Rewards AXA XL's Reward program is designed to take care of what matters most to you, covering the full picture of your health, wellbeing, lifestyle and financial security. It provides competitive compensation and personalized, inclusive benefits that evolve as you do. We're committed to rewarding your contribution for the long term, so you can be your best self today and look forward to the future with confidence. Sustainability At AXA XL, Sustainability is integral to our business strategy. In an ever-changing world, AXA XL protects what matters most for our clients and communities. We know that sustainability is at the root of a more resilient future. Our 2023-26 Sustainability strategy, called "Roots of resilience", focuses on protecting natural ecosystems, addressing climate change, and embedding sustainable practices across our operations. Our Pillars: Valuing nature: How we impact nature affects how nature impacts us. Resilient ecosystems - the foundation of a sustainable planet and society - are essential to our future. We're committed to protecting and restoring nature - from mangrove forests to the bees in our backyard - by increasing biodiversity awareness and inspiring clients and colleagues to put nature at the heart of their plans. Addressing climate change: The effects of a changing climate are far-reaching and significant. Unpredictable weather, increasing temperatures, and rising sea levels cause both social inequalities and environmental disruption. We're building a net zero strategy, developing insurance products and services, and mobilizing to advance thought leadership and investment in societal-led solutions. Integrating ESG: All companies have a role to play in building a more resilient future. Incorporating ESG considerations into our internal processes and practices builds resilience from the roots of our business. We are training our colleagues, engaging our external partners, and evolving our sustainability governance and reporting. AXA Hearts in Action: We have established volunteering and charitable giving programs to help colleagues support causes that matter most to them, known as AXA XL's "Hearts in Action" programs. These include our Matching Gifts program, Volunteering Leave, and our annual volunteering day - the Global Day of Giving. For more information, please see Who we are AXA XL, the P&C and specialty risk division of AXA, is known for solving complex risks . click apply for full job details
05/08/2026
Full time
AXA XL is an Equal Opportunity Employer. Head of Technology & AI, UK & Lloyd's and Enabling Functions Locations: UK AXA XL's Head of Technology & AI, UK & Lloyd's and Enabling Functions is a key senior executive, leadership team role in the Technology & AI function, accountable for acting as the strategic technology and AI partner to deliver for UK & Lloyd's and Enabling Functions' executive leadership team, in cooperation with the Tech & AI organization. The role ensures business strategy is translated into a coherent technology and AI roadmaps, aligning investment, engineering capacity, operating model change, and measurable outcomes. This leader shapes demand, challenges priorities, drives decision-making, and ensures delivery accountability within the Technology & AI function for UK & Lloyd's and Enabling Functions. Operating as a trusted executive peer, balancing innovation with value, risk, regulatory requirements, and operational resilience, this role reports to AXA XL's Chief Technology & AI Officer with a dotted line to Chief Executive Officer, UK & Lloyd's. What you'll be doing Executive Technology & AI Leadership Act as the primary technology and AI partner to the UK & Lloyd's and Enabling Functions shaping business direction through technology-led opportunities. Provide insights on AI disruption, competitor landscape, and modern digital and AI business models relevant to insurance. Translate complex technology concepts into commercial and operational implications for executive decision-making. Strategy-to-Execution Translation Convert business strategy into a prioritized and funded technology and AI roadmap. Define the sequencing of initiatives based on value, feasibility, regulatory constraints, and delivery capacity. Ensure roadmaps integrate digital, data, AI, automation, and core platform modernization. Drive robust partnerships within the Tech & AI leadership team to ensure common principles, frameworks and guidelines are deployed and executed with effective coordination across all disciplines in the function. Enterprise Alignment & Investment Governance Represent UK & Lloyd's and Enabling Functions' needs into enterprise technology investment forums. Own business unit-level investment cases, ensuring clarity of ROI, outcomes, and measurable benefits. Challenge the business on value definition and ensure initiatives meet enterprise architecture, security, and AI governance requirements. Portfolio Ownership & Delivery Oversight Own the technology and AI portfolio for UK & Lloyd's and Enabling Functions, ensuring delivery performance, dependencies, and risks are actively managed. Hold delivery teams accountable for execution outcomes while ensuring the business fulfils its accountabilities (SMEs, process change, adoption). Provide clear reporting to Global Leadership Team partner(s) on delivery confidence, risks, financial position, and benefits tracking. Stakeholder Management & Executive Influence Challenging and influencing senior stakeholders with poise and composure, facilitating decision-making forums, resolving prioritization conflicts and driving outcomes. Build alignment across business functions including underwriting, claims, pricing, finance, customer operations, and distribution. AI Adoption & Business Transformation Drive enterprise AI adoption within the business unit, ensuring: high-value use cases are identified adoption and operating model impacts are planned workforce readiness is supported human-in-the-loop and control frameworks are implemented Ensure AI is embedded into workflows rather than delivered as standalone tools. Risk, Resilience & Regulatory Partnership Partner with Risk, Compliance, Legal, and Security to ensure delivery aligns to regulatory and control requirements. Ensure AI initiatives comply with Responsible AI, privacy, and model risk expectations. Ensure technology resilience and service continuity risks are visible and actively managed. Commercial and Vendor Leadership Partner with Procurement and Technology leadership to shape vendor strategy aligned to business unit priorities. Support contract negotiations, supplier performance management, and strategic partnerships. Ensure commercial outcomes align to delivery outcomes and service performance. What you'll bring We're looking for someone who has these abilities and skills: Commercial Acumen Keen understanding of business strategy, financial drivers, and operational performance levers. Able to challenge executives constructively and influence investment decisions. Technology & AI Leadership Deep understanding of enterprise technology including: product engineering and agile delivery cloud platforms and modern architecture data platforms and AI enablement automation and workflow transformation Excellent ability to evaluate AI opportunities pragmatically (value, feasibility, risk). Delivery & Portfolio Discipline Outstanding portfolio and programme oversight capability. Ability to balance competing priorities, resource constraints, and dependencies. Robust governance, reporting, and delivery confidence management. Risk & Regulatory Mindset (Insurance Context) Keen understanding of regulated environments and technology control frameworks. Awareness of Responsible AI, data privacy, and model risk management principles. Relationship Management & Leadership Ability to build deep trust across business and technology Excellent conflict resolution skills and ability to drive alignment across competing agendas. What we offer Inclusion AXA XL is committed to equal employment opportunity and will consider applicants regardless of gender, sexual orientation, age, ethnicity and origins, marital status, religion, disability, or any other protected characteristic. At AXA XL, we know that an inclusive culture enables business growth and is critical to our success. That's why we have made a strategic commitment to attract, develop, advance and retain the most inclusive workforce possible, and create a culture where everyone can bring their full selves to work and reach their highest potential. It's about helping one another - and our business - to move forward and succeed. Five Business Resource Groups focused on gender, LGBTQ+, ethnicity and origins, disability and inclusion with 20 Chapters around the globe. Robust support for Flexible Working Arrangements Enhanced family-friendly leave benefits Named to the Diversity Best Practices Index Signatory to the UK Women in Finance Charter Learn more at AXA XL is an Equal Opportunity Employer. Total Rewards AXA XL's Reward program is designed to take care of what matters most to you, covering the full picture of your health, wellbeing, lifestyle and financial security. It provides competitive compensation and personalized, inclusive benefits that evolve as you do. We're committed to rewarding your contribution for the long term, so you can be your best self today and look forward to the future with confidence. Sustainability At AXA XL, Sustainability is integral to our business strategy. In an ever-changing world, AXA XL protects what matters most for our clients and communities. We know that sustainability is at the root of a more resilient future. Our 2023-26 Sustainability strategy, called "Roots of resilience", focuses on protecting natural ecosystems, addressing climate change, and embedding sustainable practices across our operations. Our Pillars: Valuing nature: How we impact nature affects how nature impacts us. Resilient ecosystems - the foundation of a sustainable planet and society - are essential to our future. We're committed to protecting and restoring nature - from mangrove forests to the bees in our backyard - by increasing biodiversity awareness and inspiring clients and colleagues to put nature at the heart of their plans. Addressing climate change: The effects of a changing climate are far-reaching and significant. Unpredictable weather, increasing temperatures, and rising sea levels cause both social inequalities and environmental disruption. We're building a net zero strategy, developing insurance products and services, and mobilizing to advance thought leadership and investment in societal-led solutions. Integrating ESG: All companies have a role to play in building a more resilient future. Incorporating ESG considerations into our internal processes and practices builds resilience from the roots of our business. We are training our colleagues, engaging our external partners, and evolving our sustainability governance and reporting. AXA Hearts in Action: We have established volunteering and charitable giving programs to help colleagues support causes that matter most to them, known as AXA XL's "Hearts in Action" programs. These include our Matching Gifts program, Volunteering Leave, and our annual volunteering day - the Global Day of Giving. For more information, please see Who we are AXA XL, the P&C and specialty risk division of AXA, is known for solving complex risks . click apply for full job details
The Head of Security Architecture with deep expertise in AI systems to design, implement, and maintain secure architectures for enterprise security, artificial intelligence and machine learning initiatives across the organisation. This role will define technical security standards, reference architectures, and implementation frameworks that protect traditional IT environments and AI systems, models, data pipelines, and deployments throughout their life-cycle - from conception to production. The Head of Security Architecture will partner with stakeholders and internal teams to establish a comprehensive, forward-looking security strategy and architecture that enables organisational ambitions while managing AI-related security risks. What you'll be doing What will your essential responsibilities include? Work with stakeholders and internal teams to define a comprehensive, forward-looking Security strategy, inclusive of AI Security and Architecture that supports the organisation's global growth ambitions, incorporating policies, standards, and control frameworks applicable across multiple jurisdictions. Establish and evolve governance mechanisms that promote responsible, ethical, and compliant AI use worldwide, considering regional regulatory nuances and cultural sensitivities. Integrate AI security requirements into security and enterprise architecture, software development life cycles, and model life-cycle management, ensuring consistency and agility across diverse operational regions. Will be part of Security Strategy development and does require interaction with executive business leaders for a global organisation. Architecture & Design: Design enterprise-wide security architectures and reference implementations Establish secure AI development, training, and deployment pipelines Define AI & security data governance and access control frameworks for systems Create security-by-design principles for AI model development Design threat models specific to AI/ML systems and attack surfaces Technical Security Standards: Develop and maintain security frameworks and best practices Create secure coding standards for ML engineers and data scientists Establish model validation, testing, and verification protocols Define encryption, authentication, and authorisation standards for systems Document security requirements and technical specifications Infrastructure & Systems: Architect secure AI infrastructure (cloud, on-prem, hybrid) Design model registry, versioning, and deployment systems with security controls Implement monitoring, logging, and anomaly detection for AI systems Oversee secure data pipelines and feature stores Design isolation and sandboxing for high-risk AI workloads Risk & Threat Mitigation: Conduct threat modelling for AI systems (adversarial attacks, model poisoning, data poisoning) Design defences against AI-specific vulnerabilities Implement model robustness testing and validation frameworks Create incident response architectures for AI security breaches Design recovery and rollback mechanisms for compromised models Vendor & Third-Party Management: Evaluate and architect integrations with third-party AI platforms securely Define security requirements for AI vendors and SaaS providers Design secure APIs and interfaces for external AI model access Oversee security architecture of outsourced AI development Governance & Compliance: Align security architecture with regulatory requirements (GDPR, AI Act, industry standards) Design audit trails and compliance monitoring systems Document architecture decisions and security trade-offs Collaborate on responsible AI and ethical AI architecture considerations Team Leadership & Knowledge Sharing: Lead AI security architecture reviews and design sessions Mentor security engineers and architects Present architecture recommendations to technical and executive stakeholders Build and maintain security architecture documentation Drive adoption of secure architecture patterns You will report to Chief Security Officer. What you'll bring We're looking for someone who has these abilities and skills: Substantial experience in cyber security, systems architecture, or infrastructure security Proven capabilities in designing and architecture large-scale systems Experience in hands-on and applied experience with AI/ML security architecture Deep technical knowledge of: Machine learning systems and workflows AI/ML vulnerabilities and attack vectors (adversarial examples, model extraction, poisoning) Cloud security and containerisation (Docker, Kubernetes) Data security, encryption, and access controls API security and micro-services architecture Robust background in threat modelling and security architecture frameworks Experience with secure software development life-cycle (SSDLC) Advanced degree in Computer Science, Cyber security, or related field (or equivalent) Key Competencies Executive judgement and credibility Global risk thinking and cultural agility Governance and control design Influencing and stakeholder management without direct authority Clear, compelling communication tailored for diverse audiences, including boards and regulators Balancing innovation with disciplined risk management on a global scale Preferred Skills CISSP, CCSK, CISM, AAISM or similar security architecture certification Experience with MLOps/MLSecOps platforms Background in machine learning engineering or data science Experience with AI governance and responsible AI frameworks Knowledge of AI-specific security standards (NIST AI RMF, ISO/IEC 42001) Experience in regulated industries (finance, healthcare, government) Contributions to open-source security or AI security projects Speaking/publishing on AI security topics What we offer Inclusion AXA XL is committed to equal employment opportunity and will consider applicants regardless of gender, sexual orientation, age, ethnicity and origins, marital status, religion, disability, or any other protected characteristic. At AXA XL, we know that an inclusive culture and enables business growth and is critical to our success. That's why we have made a strategic commitment to attract, develop, advance and retain the most inclusive workforce possible, and create a culture where everyone can bring their full selves to work and reach their highest potential. It's about helping one another - and our business - to move forward and succeed. Five Business Resource Groups focused on gender, LGBTQ+, ethnicity and origins, disability and inclusion with 20 Chapters around the globe. Robust support for Flexible Working Arrangements Enhanced family-friendly leave benefits Named to the Diversity Best Practices Index Signatory to the UK Women in Finance Charter Learn more at AXA XL is an Equal Opportunity Employer. Total Rewards AXA XL's Reward program is designed to take care of what matters most to you, covering the full picture of your health, wellbeing, lifestyle and financial security. It provides competitive compensation and personalized, inclusive benefits that evolve as you do. We're committed to rewarding your contribution for the long term, so you can be your best self today and look forward to the future with confidence. Sustainability At AXA XL, Sustainability is integral to our business strategy. In an ever-changing world, AXA XL protects what matters most for our clients and communities. We know that sustainability is at the root of a more resilient future. Our 2023-26 Sustainability strategy, called "Roots of resilience", focuses on protecting natural ecosystems, addressing climate change, and embedding sustainable practices across our operations. Our Pillars: Valuing nature: How we impact nature affects how nature impacts us. Resilient ecosystems - the foundation of a sustainable planet and society - are essential to our future. We're committed to protecting and restoring nature - from mangrove forests to the bees in our backyard - by increasing biodiversity awareness and inspiring clients and colleagues to put nature at the heart of their plans. Addressing climate change: The effects of a changing climate are far-reaching and significant. Unpredictable weather, increasing temperatures, and rising sea levels cause both social inequalities and environmental disruption. We're building a net zero strategy, developing insurance products and services, and mobilizing to advance thought leadership and investment in societal-led solutions. Integrating ESG: All companies have a role to play in building a more resilient future. Incorporating ESG considerations into our internal processes and practices builds resilience from the roots of our business. We're training our colleagues, engaging our external partners, and evolving our sustainability governance and reporting. AXA Hearts in Action: We have established volunteering and charitable giving programs to help colleagues support causes that matter most to them, known as AXA XL's "Hearts in Action" programs. These include our Matching Gifts program . click apply for full job details
04/08/2026
Full time
The Head of Security Architecture with deep expertise in AI systems to design, implement, and maintain secure architectures for enterprise security, artificial intelligence and machine learning initiatives across the organisation. This role will define technical security standards, reference architectures, and implementation frameworks that protect traditional IT environments and AI systems, models, data pipelines, and deployments throughout their life-cycle - from conception to production. The Head of Security Architecture will partner with stakeholders and internal teams to establish a comprehensive, forward-looking security strategy and architecture that enables organisational ambitions while managing AI-related security risks. What you'll be doing What will your essential responsibilities include? Work with stakeholders and internal teams to define a comprehensive, forward-looking Security strategy, inclusive of AI Security and Architecture that supports the organisation's global growth ambitions, incorporating policies, standards, and control frameworks applicable across multiple jurisdictions. Establish and evolve governance mechanisms that promote responsible, ethical, and compliant AI use worldwide, considering regional regulatory nuances and cultural sensitivities. Integrate AI security requirements into security and enterprise architecture, software development life cycles, and model life-cycle management, ensuring consistency and agility across diverse operational regions. Will be part of Security Strategy development and does require interaction with executive business leaders for a global organisation. Architecture & Design: Design enterprise-wide security architectures and reference implementations Establish secure AI development, training, and deployment pipelines Define AI & security data governance and access control frameworks for systems Create security-by-design principles for AI model development Design threat models specific to AI/ML systems and attack surfaces Technical Security Standards: Develop and maintain security frameworks and best practices Create secure coding standards for ML engineers and data scientists Establish model validation, testing, and verification protocols Define encryption, authentication, and authorisation standards for systems Document security requirements and technical specifications Infrastructure & Systems: Architect secure AI infrastructure (cloud, on-prem, hybrid) Design model registry, versioning, and deployment systems with security controls Implement monitoring, logging, and anomaly detection for AI systems Oversee secure data pipelines and feature stores Design isolation and sandboxing for high-risk AI workloads Risk & Threat Mitigation: Conduct threat modelling for AI systems (adversarial attacks, model poisoning, data poisoning) Design defences against AI-specific vulnerabilities Implement model robustness testing and validation frameworks Create incident response architectures for AI security breaches Design recovery and rollback mechanisms for compromised models Vendor & Third-Party Management: Evaluate and architect integrations with third-party AI platforms securely Define security requirements for AI vendors and SaaS providers Design secure APIs and interfaces for external AI model access Oversee security architecture of outsourced AI development Governance & Compliance: Align security architecture with regulatory requirements (GDPR, AI Act, industry standards) Design audit trails and compliance monitoring systems Document architecture decisions and security trade-offs Collaborate on responsible AI and ethical AI architecture considerations Team Leadership & Knowledge Sharing: Lead AI security architecture reviews and design sessions Mentor security engineers and architects Present architecture recommendations to technical and executive stakeholders Build and maintain security architecture documentation Drive adoption of secure architecture patterns You will report to Chief Security Officer. What you'll bring We're looking for someone who has these abilities and skills: Substantial experience in cyber security, systems architecture, or infrastructure security Proven capabilities in designing and architecture large-scale systems Experience in hands-on and applied experience with AI/ML security architecture Deep technical knowledge of: Machine learning systems and workflows AI/ML vulnerabilities and attack vectors (adversarial examples, model extraction, poisoning) Cloud security and containerisation (Docker, Kubernetes) Data security, encryption, and access controls API security and micro-services architecture Robust background in threat modelling and security architecture frameworks Experience with secure software development life-cycle (SSDLC) Advanced degree in Computer Science, Cyber security, or related field (or equivalent) Key Competencies Executive judgement and credibility Global risk thinking and cultural agility Governance and control design Influencing and stakeholder management without direct authority Clear, compelling communication tailored for diverse audiences, including boards and regulators Balancing innovation with disciplined risk management on a global scale Preferred Skills CISSP, CCSK, CISM, AAISM or similar security architecture certification Experience with MLOps/MLSecOps platforms Background in machine learning engineering or data science Experience with AI governance and responsible AI frameworks Knowledge of AI-specific security standards (NIST AI RMF, ISO/IEC 42001) Experience in regulated industries (finance, healthcare, government) Contributions to open-source security or AI security projects Speaking/publishing on AI security topics What we offer Inclusion AXA XL is committed to equal employment opportunity and will consider applicants regardless of gender, sexual orientation, age, ethnicity and origins, marital status, religion, disability, or any other protected characteristic. At AXA XL, we know that an inclusive culture and enables business growth and is critical to our success. That's why we have made a strategic commitment to attract, develop, advance and retain the most inclusive workforce possible, and create a culture where everyone can bring their full selves to work and reach their highest potential. It's about helping one another - and our business - to move forward and succeed. Five Business Resource Groups focused on gender, LGBTQ+, ethnicity and origins, disability and inclusion with 20 Chapters around the globe. Robust support for Flexible Working Arrangements Enhanced family-friendly leave benefits Named to the Diversity Best Practices Index Signatory to the UK Women in Finance Charter Learn more at AXA XL is an Equal Opportunity Employer. Total Rewards AXA XL's Reward program is designed to take care of what matters most to you, covering the full picture of your health, wellbeing, lifestyle and financial security. It provides competitive compensation and personalized, inclusive benefits that evolve as you do. We're committed to rewarding your contribution for the long term, so you can be your best self today and look forward to the future with confidence. Sustainability At AXA XL, Sustainability is integral to our business strategy. In an ever-changing world, AXA XL protects what matters most for our clients and communities. We know that sustainability is at the root of a more resilient future. Our 2023-26 Sustainability strategy, called "Roots of resilience", focuses on protecting natural ecosystems, addressing climate change, and embedding sustainable practices across our operations. Our Pillars: Valuing nature: How we impact nature affects how nature impacts us. Resilient ecosystems - the foundation of a sustainable planet and society - are essential to our future. We're committed to protecting and restoring nature - from mangrove forests to the bees in our backyard - by increasing biodiversity awareness and inspiring clients and colleagues to put nature at the heart of their plans. Addressing climate change: The effects of a changing climate are far-reaching and significant. Unpredictable weather, increasing temperatures, and rising sea levels cause both social inequalities and environmental disruption. We're building a net zero strategy, developing insurance products and services, and mobilizing to advance thought leadership and investment in societal-led solutions. Integrating ESG: All companies have a role to play in building a more resilient future. Incorporating ESG considerations into our internal processes and practices builds resilience from the roots of our business. We're training our colleagues, engaging our external partners, and evolving our sustainability governance and reporting. AXA Hearts in Action: We have established volunteering and charitable giving programs to help colleagues support causes that matter most to them, known as AXA XL's "Hearts in Action" programs. These include our Matching Gifts program . click apply for full job details
Job Description Job Title Interim Cyber Security Officer (Senior Cyber Security Engineer) Contract Details Contract Length: 6 Months Start Date: March 2026 Location: London (Hybrid/On-site as required) IR35 Status: Inside IR35 Daily Rate: Up to 500 per day (Umbrella) Overview We are seeking an experienced Senior Cyber Security Engineer to join a Cyber Security team on an interim contract. This role will provide senior technical expertise to support and optimise an outsourced Security Operations Centre (SOC), ensuring the organisation maximises its investment in security technologies while strengthening its cyber defence capabilities. The successful candidate will have extensive hands-on experience with CrowdStrike Falcon and Splunk Enterprise Security , with the ability to enhance security monitoring, improve incident response processes, support threat hunting activities, and mentor internal team members. Key Responsibilities Lead the deployment, configuration, administration, and ongoing optimisation of the CrowdStrike Falcon platform, ensuring endpoint security policies are effectively implemented and maintained. Work closely with the outsourced Security Operations Centre to develop and enhance Splunk dashboards, alerts, data models, and monitoring capabilities, enabling the identification and investigation of sophisticated cyber threats. Act as the senior technical escalation point for complex and high-priority cyber security incidents, utilising Endpoint Detection and Response (EDR) and Security Information and Event Management (SIEM) technologies to support rapid investigation, containment, and remediation. Design, develop, and improve Security Orchestration, Automation and Response (SOAR) workflows to reduce manual effort, improve operational efficiency, and accelerate incident response. Conduct proactive threat hunting activities using advanced search techniques and security telemetry to identify malicious activity that may have evaded automated detection. Support vulnerability assessment activities and contribute to security testing initiatives, including exposure to penetration testing and web application security assessments. Develop and maintain cyber security policies, standards, and technical documentation to support governance and operational best practice. Provide technical guidance, mentoring, and knowledge transfer to existing cyber security team members, strengthening internal capability across CrowdStrike, Splunk, and security operations. Collaborate with internal stakeholders and external partners to continuously improve cyber security monitoring, detection, and response capabilities. Maintain awareness of emerging cyber threats, vulnerabilities, and industry best practices to ensure security controls remain effective and up to date. Essential Requirements Applicants must have a minimum of five years' experience working in a dedicated Cyber Security Engineering or SOC Tier 3 environment. Extensive hands-on experience administering and supporting CrowdStrike Falcon , including Falcon Prevent, Falcon Insight, and Falcon Discover, is essential. Strong experience working with Splunk Enterprise Security , including writing complex Search Processing Language (SPL) queries, developing dashboards, alerts, reports, and managing security data. Experience supporting Security Operations Centres, incident response, endpoint detection and response, security monitoring, and threat hunting activities. Excellent understanding of network protocols, cyber attack methodologies, security monitoring techniques, and the MITRE ATT&CK Framework . Good knowledge of cloud security principles across Microsoft Azure and/or AWS environments. Strong analytical, troubleshooting, communication, and stakeholder management skills with the ability to work independently and manage multiple priorities. Desirable Experience performing vulnerability assessments using recognised vulnerability management tools. Exposure to penetration testing and web application security testing. Experience creating and maintaining cyber security policies, standards, and governance documentation. Professional cyber security certifications such as CompTIA Security+, Network+, CySA+, GSEC, CISSP, GCIH, GCIA, or CCSP. CrowdStrike certifications including CCFA, CCFR, or CCSE. Splunk Certified Cybersecurity Defense Engineer certification.
03/08/2026
Contractor
Job Description Job Title Interim Cyber Security Officer (Senior Cyber Security Engineer) Contract Details Contract Length: 6 Months Start Date: March 2026 Location: London (Hybrid/On-site as required) IR35 Status: Inside IR35 Daily Rate: Up to 500 per day (Umbrella) Overview We are seeking an experienced Senior Cyber Security Engineer to join a Cyber Security team on an interim contract. This role will provide senior technical expertise to support and optimise an outsourced Security Operations Centre (SOC), ensuring the organisation maximises its investment in security technologies while strengthening its cyber defence capabilities. The successful candidate will have extensive hands-on experience with CrowdStrike Falcon and Splunk Enterprise Security , with the ability to enhance security monitoring, improve incident response processes, support threat hunting activities, and mentor internal team members. Key Responsibilities Lead the deployment, configuration, administration, and ongoing optimisation of the CrowdStrike Falcon platform, ensuring endpoint security policies are effectively implemented and maintained. Work closely with the outsourced Security Operations Centre to develop and enhance Splunk dashboards, alerts, data models, and monitoring capabilities, enabling the identification and investigation of sophisticated cyber threats. Act as the senior technical escalation point for complex and high-priority cyber security incidents, utilising Endpoint Detection and Response (EDR) and Security Information and Event Management (SIEM) technologies to support rapid investigation, containment, and remediation. Design, develop, and improve Security Orchestration, Automation and Response (SOAR) workflows to reduce manual effort, improve operational efficiency, and accelerate incident response. Conduct proactive threat hunting activities using advanced search techniques and security telemetry to identify malicious activity that may have evaded automated detection. Support vulnerability assessment activities and contribute to security testing initiatives, including exposure to penetration testing and web application security assessments. Develop and maintain cyber security policies, standards, and technical documentation to support governance and operational best practice. Provide technical guidance, mentoring, and knowledge transfer to existing cyber security team members, strengthening internal capability across CrowdStrike, Splunk, and security operations. Collaborate with internal stakeholders and external partners to continuously improve cyber security monitoring, detection, and response capabilities. Maintain awareness of emerging cyber threats, vulnerabilities, and industry best practices to ensure security controls remain effective and up to date. Essential Requirements Applicants must have a minimum of five years' experience working in a dedicated Cyber Security Engineering or SOC Tier 3 environment. Extensive hands-on experience administering and supporting CrowdStrike Falcon , including Falcon Prevent, Falcon Insight, and Falcon Discover, is essential. Strong experience working with Splunk Enterprise Security , including writing complex Search Processing Language (SPL) queries, developing dashboards, alerts, reports, and managing security data. Experience supporting Security Operations Centres, incident response, endpoint detection and response, security monitoring, and threat hunting activities. Excellent understanding of network protocols, cyber attack methodologies, security monitoring techniques, and the MITRE ATT&CK Framework . Good knowledge of cloud security principles across Microsoft Azure and/or AWS environments. Strong analytical, troubleshooting, communication, and stakeholder management skills with the ability to work independently and manage multiple priorities. Desirable Experience performing vulnerability assessments using recognised vulnerability management tools. Exposure to penetration testing and web application security testing. Experience creating and maintaining cyber security policies, standards, and governance documentation. Professional cyber security certifications such as CompTIA Security+, Network+, CySA+, GSEC, CISSP, GCIH, GCIA, or CCSP. CrowdStrike certifications including CCFA, CCFR, or CCSE. Splunk Certified Cybersecurity Defense Engineer certification.
As the Chief Information Security Officer (CISO) for the Actuation GBU/subsidiary, you play a central role in safeguarding the integrity, confidentiality, and availability of all Information Systems (IS) across the GBU's sites. You report hierarchically to the CISO of Safran Electronics & Defense and functionally to the Actuation GBU IT Department. You are responsible for ensuring compliance with all applicable internal and external security frameworks, including (subject to nationality constraints): Safran Information System Security Policy NCSC Cyber Assessment Framework France IGI 1300 Export Control, ITAR, and related regulatory requirements Key Responsibilities Governance & Compliance Oversee and monitor accreditation and approval processes for all local IS within your scope. Ensure compliance with Safran ISS policies and all relevant national and international regulations. Contribute to defining security objectives and requirements for IS across the GBU. Develop, implement, and maintain IS security procedures. Conduct audits and continuous monitoring to ensure adherence to ISS rules. Monitor local enforcement of applicable data protection and regulatory requirements. Security Expertise & Project Support Provide ISS expertise and support for GBU IT projects, including Secure by Design practices. Support Industrial Management teams in securing operational and industrial environments. Act as the primary ISS point of contact for local authorities and external contractors. Awareness, Training & User Engagement Advise, inform, and raise awareness among users on ISS best practices (encryption, removable media, travel procedures, etc.). Deliver onboarding ISS training for newcomers and recurring awareness sessions for all staff. Conduct targeted awareness sessions for newly authorized personnel or those renewing authorization. Incident Response & Operational Security Manage ISS alerts originating from Safran CERT/SOC and the SED ISS operational unit. Handle alerts on administrator and user workstations, including first level forensic analysis, user interviews, and coordination with Local Support teams. Escalate issues requiring clarification or broader company involvement to central ISS teams. Candidate Profile Master's degree in cybersecurity, information systems, or a related field (or equivalent experience). Broad, versatile expertise in information systems security. Knowledge of British, US, French, or European regulations related to the protection of national defence information is a strong advantage. Excellent interpersonal and communication skills, with the ability to educate and influence stakeholders at all levels. Demonstrated availability, reliability, and strong team spirit. Comfortable working in an international, multi site environment with regular travel.
02/08/2026
Full time
As the Chief Information Security Officer (CISO) for the Actuation GBU/subsidiary, you play a central role in safeguarding the integrity, confidentiality, and availability of all Information Systems (IS) across the GBU's sites. You report hierarchically to the CISO of Safran Electronics & Defense and functionally to the Actuation GBU IT Department. You are responsible for ensuring compliance with all applicable internal and external security frameworks, including (subject to nationality constraints): Safran Information System Security Policy NCSC Cyber Assessment Framework France IGI 1300 Export Control, ITAR, and related regulatory requirements Key Responsibilities Governance & Compliance Oversee and monitor accreditation and approval processes for all local IS within your scope. Ensure compliance with Safran ISS policies and all relevant national and international regulations. Contribute to defining security objectives and requirements for IS across the GBU. Develop, implement, and maintain IS security procedures. Conduct audits and continuous monitoring to ensure adherence to ISS rules. Monitor local enforcement of applicable data protection and regulatory requirements. Security Expertise & Project Support Provide ISS expertise and support for GBU IT projects, including Secure by Design practices. Support Industrial Management teams in securing operational and industrial environments. Act as the primary ISS point of contact for local authorities and external contractors. Awareness, Training & User Engagement Advise, inform, and raise awareness among users on ISS best practices (encryption, removable media, travel procedures, etc.). Deliver onboarding ISS training for newcomers and recurring awareness sessions for all staff. Conduct targeted awareness sessions for newly authorized personnel or those renewing authorization. Incident Response & Operational Security Manage ISS alerts originating from Safran CERT/SOC and the SED ISS operational unit. Handle alerts on administrator and user workstations, including first level forensic analysis, user interviews, and coordination with Local Support teams. Escalate issues requiring clarification or broader company involvement to central ISS teams. Candidate Profile Master's degree in cybersecurity, information systems, or a related field (or equivalent experience). Broad, versatile expertise in information systems security. Knowledge of British, US, French, or European regulations related to the protection of national defence information is a strong advantage. Excellent interpersonal and communication skills, with the ability to educate and influence stakeholders at all levels. Demonstrated availability, reliability, and strong team spirit. Comfortable working in an international, multi site environment with regular travel.
Multi-Site Security Officer (Street Team) London, United Kingdom Posted on 29/06/2026 Job Description Job Title: Relief Security Officer (StreetTeam) Location: Central London Working Hours: ZeroHours - Holiday & Sickness Cover Reporting to: Contract Supervisor / Regional Operations Manager Overview: An exciting opportunity for an experienced, reliable and flexible Relief Security Officer to join our award winning Street Team based in Central London, working within one of the Business Improvement Districts (BID). This role is ideal for someone looking to cover holiday and sickness shifts, including short notice cover, and who is happy to work exclusively outdoors. The role focuses on improving safety, reassurance and overall perceptions across the BID area by maintaining a highly visible, uniformed presence. The holder acts as the "eyes and ears" of the BID, proactively identifying and responding to issues, deterring crime, and providing reassurance to businesses, residents and visitors. Responsibilities include addressing incidents of crime, anti social behaviour, nuisance activity and environmental concerns in a professional manner, and collecting and sharing high quality intelligence with partner agencies to support a coordinated approach to safety and security. The post also delivers a welcoming, ambassadorial service, engaging positively with the public and local businesses, promoting the area, supporting counter terrorism awareness, and contributing to the overall resilience of the BID through vigilance, communication and adherence to best practice. Act as a BID Warden and proactively address antisocial behaviour. Build and maintain positive relationships with BID businesses, premises, and levy payers. Maintain a visible high profile presence to protect the area, people, goods and property. Identify and report suspicious activity, security concerns and environmental hazards. Liaise effectively with BID representatives, clients, and local businesses. Refer vulnerable people to appropriate agencies and conduct morning & evening counts of rough sleepers. Manage and process lost property in accordance with procedures. Report environmental issues including waste, fly tipping, graffiti, water leaks, broken traffic lights and damaged street furniture. Deal with pedicabs. Respond promptly and professionally to requests for assistance from local businesses and stakeholders. Carry out regular patrols across the BID area to monitor activity and provide a reassuring presence. Accurately record incidents, patrols and daily activities using electronic reporting systems. Respond effectively to emergencies, incidents and requests for support. Investigate and respond to reports of theft in collaboration with businesses and authorities. Monitor, record and report incidents of antisocial behaviour and organised begging. Work collaboratively with the Police and other partner agencies to support crime prevention and community safety initiatives. Maintain professional and effective communication with customers, contractors, visitors and the public. Assist with any other reasonable duties or responsibilities as requested by the BID. Requirements Valid SIA Licence (DS) - ESSENTIAL Full 5 year checkable employment history Comfortable working outdoors in all weather conditions Flexible and reliable with the ability to work at short notice Excellent written and verbal communication skills Confident dealing with businesses, local community and vulnerable persons Professional appearance and attitude Ability to work independently and as part of a team Access to nationally recognised courses via the Anchor Academy Access to SIA and First Aid training at discounted rates with financial support available Auto Enrolment Pension (if earnings reach the minimum requirement for auto enrolment) Stream - access to pay as you earn it Cycle to Work Scheme Available Full uniform provided Free Employee Assistance Programme 24/7 including access to counselling Hospital Saturday Fund Reward and Recognition awards Anchor Group Services is an Equal Opportunity Employer and does not discriminate on the basis of race or ethnicity, religion, sex, national origin, age, veteran disability or genetic information or any other reason prohibited by law in employment.
31/07/2026
Full time
Multi-Site Security Officer (Street Team) London, United Kingdom Posted on 29/06/2026 Job Description Job Title: Relief Security Officer (StreetTeam) Location: Central London Working Hours: ZeroHours - Holiday & Sickness Cover Reporting to: Contract Supervisor / Regional Operations Manager Overview: An exciting opportunity for an experienced, reliable and flexible Relief Security Officer to join our award winning Street Team based in Central London, working within one of the Business Improvement Districts (BID). This role is ideal for someone looking to cover holiday and sickness shifts, including short notice cover, and who is happy to work exclusively outdoors. The role focuses on improving safety, reassurance and overall perceptions across the BID area by maintaining a highly visible, uniformed presence. The holder acts as the "eyes and ears" of the BID, proactively identifying and responding to issues, deterring crime, and providing reassurance to businesses, residents and visitors. Responsibilities include addressing incidents of crime, anti social behaviour, nuisance activity and environmental concerns in a professional manner, and collecting and sharing high quality intelligence with partner agencies to support a coordinated approach to safety and security. The post also delivers a welcoming, ambassadorial service, engaging positively with the public and local businesses, promoting the area, supporting counter terrorism awareness, and contributing to the overall resilience of the BID through vigilance, communication and adherence to best practice. Act as a BID Warden and proactively address antisocial behaviour. Build and maintain positive relationships with BID businesses, premises, and levy payers. Maintain a visible high profile presence to protect the area, people, goods and property. Identify and report suspicious activity, security concerns and environmental hazards. Liaise effectively with BID representatives, clients, and local businesses. Refer vulnerable people to appropriate agencies and conduct morning & evening counts of rough sleepers. Manage and process lost property in accordance with procedures. Report environmental issues including waste, fly tipping, graffiti, water leaks, broken traffic lights and damaged street furniture. Deal with pedicabs. Respond promptly and professionally to requests for assistance from local businesses and stakeholders. Carry out regular patrols across the BID area to monitor activity and provide a reassuring presence. Accurately record incidents, patrols and daily activities using electronic reporting systems. Respond effectively to emergencies, incidents and requests for support. Investigate and respond to reports of theft in collaboration with businesses and authorities. Monitor, record and report incidents of antisocial behaviour and organised begging. Work collaboratively with the Police and other partner agencies to support crime prevention and community safety initiatives. Maintain professional and effective communication with customers, contractors, visitors and the public. Assist with any other reasonable duties or responsibilities as requested by the BID. Requirements Valid SIA Licence (DS) - ESSENTIAL Full 5 year checkable employment history Comfortable working outdoors in all weather conditions Flexible and reliable with the ability to work at short notice Excellent written and verbal communication skills Confident dealing with businesses, local community and vulnerable persons Professional appearance and attitude Ability to work independently and as part of a team Access to nationally recognised courses via the Anchor Academy Access to SIA and First Aid training at discounted rates with financial support available Auto Enrolment Pension (if earnings reach the minimum requirement for auto enrolment) Stream - access to pay as you earn it Cycle to Work Scheme Available Full uniform provided Free Employee Assistance Programme 24/7 including access to counselling Hospital Saturday Fund Reward and Recognition awards Anchor Group Services is an Equal Opportunity Employer and does not discriminate on the basis of race or ethnicity, religion, sex, national origin, age, veteran disability or genetic information or any other reason prohibited by law in employment.
Job Description null Key Responsibilities: Generate and win new business opportunities across the Midlands, driving revenue growth in line with business targets. Identify, target and engage new clients across the commercial property, vacant property and property management sectors. Build, manage and convert a high-quality sales pipeline through proactive prospecting, networking, referrals, market engagement and targeted outreach. Take ownership of opportunities from initial engagement through qualification, proposal development, negotiation and contract award. Develop strong relationships with prospective clients and position FRG as a trusted partner for vacant property protection and risk management solutions. Work collaboratively with bid, operational and leadership teams to develop compelling, commercially competitive solutions for clients. Lead commercial discussions and negotiations to secure profitable new business wins. Monitor market activity, sector trends and competitor movement to identify new routes to market and growth opportunities. Maintain accurate CRM and pipeline reporting, providing visibility of activity, conversion, forecasts and performance against targets. Represent FRG professionally at client meetings, networking events, exhibitions and industry forums. Essential Skills: Proven experience in business development, B2B sales or client acquisition, with a strong emphasis on new business generation. A demonstrable track record of winning new business and building a sales pipeline from scratch. Strong commercial awareness with the ability to identify, qualify and convert opportunities into profitable revenue. Excellent communication, presentation and negotiation skills. A proactive, self-motivated and resilient approach with a genuine passion for winning new business. Ability to manage multiple opportunities across a regional territory. Full UK driving licence and willingness to travel throughout the Midlands. Desirable Experience: Experience selling security, vacant property, facilities management, property protection or technology-led solutions. Experience selling to managing agents, commercial property owners, asset managers, landlords or facilities management organisations. Understanding of vacant property protection, risk management services and commercial property environments. Experience working with CCTV, remote monitoring, key holding, alarm response, access control or related security solutions. Are you a proven new business professional who thrives on opening doors, building relationships and winning new business within the commercial property sector? At First Response Group (FRG), we are looking for a commercially driven and proactive Business Development Manager to support the growth of our Risk Management division across the Midlands. This is a genuine new business role, not account management, focused on generating opportunities, building a pipeline from scratch and securing new contracts for our vacant property and property protection services. Reporting to the Head of Risk Management, you will identify and engage target organisations, develop relationships from first contact through to contract award, and work closely with bid and operational teams to deliver winning solutions. The role will focus on developing opportunities within the vacant property, commercial property and property management sectors, helping clients protect and manage their assets through FRG's specialist risk management services. As a leading provider of security, risk management and facilities solutions, FRG combines innovative technology, industry expertise, and a people-focused culture to deliver exceptional service and continued growth First Response Group is not just a workplace. It is a vibrant community where passion fuels our excellence, integrity guides our conduct, empowerment shapes our successes, and a sense of community binds us together. is a dynamic and forward thinking provider of security, risk management, and facilities solutions. We distinguish ourselves through the integration of cutting edge technology, a commitment to employee development, and a culture rooted in inclusivity and positivity. At FRG, every team member's contribution is valued, and collective success is celebrated. Services You Will Promote: Vacant property inspections Key holding and alarm response Security Officers Concierge services Mobile security patrols Vacant property security solutions CCTV and remote monitoring technology Intruder alarms and access control Risk mitigation and property protection services What We Offer: Circa £40,000 salary, depending on experience (includes company car) Annual bonus A genuine new business role with autonomy to develop your region Support from a collaborative and experienced internal team The opportunity to work in a growing Risk Management division Career progression opportunities as the business continues to expand Hybrid and field-based working across the Midlands
30/07/2026
Full time
Job Description null Key Responsibilities: Generate and win new business opportunities across the Midlands, driving revenue growth in line with business targets. Identify, target and engage new clients across the commercial property, vacant property and property management sectors. Build, manage and convert a high-quality sales pipeline through proactive prospecting, networking, referrals, market engagement and targeted outreach. Take ownership of opportunities from initial engagement through qualification, proposal development, negotiation and contract award. Develop strong relationships with prospective clients and position FRG as a trusted partner for vacant property protection and risk management solutions. Work collaboratively with bid, operational and leadership teams to develop compelling, commercially competitive solutions for clients. Lead commercial discussions and negotiations to secure profitable new business wins. Monitor market activity, sector trends and competitor movement to identify new routes to market and growth opportunities. Maintain accurate CRM and pipeline reporting, providing visibility of activity, conversion, forecasts and performance against targets. Represent FRG professionally at client meetings, networking events, exhibitions and industry forums. Essential Skills: Proven experience in business development, B2B sales or client acquisition, with a strong emphasis on new business generation. A demonstrable track record of winning new business and building a sales pipeline from scratch. Strong commercial awareness with the ability to identify, qualify and convert opportunities into profitable revenue. Excellent communication, presentation and negotiation skills. A proactive, self-motivated and resilient approach with a genuine passion for winning new business. Ability to manage multiple opportunities across a regional territory. Full UK driving licence and willingness to travel throughout the Midlands. Desirable Experience: Experience selling security, vacant property, facilities management, property protection or technology-led solutions. Experience selling to managing agents, commercial property owners, asset managers, landlords or facilities management organisations. Understanding of vacant property protection, risk management services and commercial property environments. Experience working with CCTV, remote monitoring, key holding, alarm response, access control or related security solutions. Are you a proven new business professional who thrives on opening doors, building relationships and winning new business within the commercial property sector? At First Response Group (FRG), we are looking for a commercially driven and proactive Business Development Manager to support the growth of our Risk Management division across the Midlands. This is a genuine new business role, not account management, focused on generating opportunities, building a pipeline from scratch and securing new contracts for our vacant property and property protection services. Reporting to the Head of Risk Management, you will identify and engage target organisations, develop relationships from first contact through to contract award, and work closely with bid and operational teams to deliver winning solutions. The role will focus on developing opportunities within the vacant property, commercial property and property management sectors, helping clients protect and manage their assets through FRG's specialist risk management services. As a leading provider of security, risk management and facilities solutions, FRG combines innovative technology, industry expertise, and a people-focused culture to deliver exceptional service and continued growth First Response Group is not just a workplace. It is a vibrant community where passion fuels our excellence, integrity guides our conduct, empowerment shapes our successes, and a sense of community binds us together. is a dynamic and forward thinking provider of security, risk management, and facilities solutions. We distinguish ourselves through the integration of cutting edge technology, a commitment to employee development, and a culture rooted in inclusivity and positivity. At FRG, every team member's contribution is valued, and collective success is celebrated. Services You Will Promote: Vacant property inspections Key holding and alarm response Security Officers Concierge services Mobile security patrols Vacant property security solutions CCTV and remote monitoring technology Intruder alarms and access control Risk mitigation and property protection services What We Offer: Circa £40,000 salary, depending on experience (includes company car) Annual bonus A genuine new business role with autonomy to develop your region Support from a collaborative and experienced internal team The opportunity to work in a growing Risk Management division Career progression opportunities as the business continues to expand Hybrid and field-based working across the Midlands
Data Governance Lead Introduction The Data Governance Lead will lead the growth and execution of nxzen's Data Governance, and Data Operating Models offerings in the UK market. Reporting to the UK Head of Data and AI, and working alongside the AI and Analytics Lead, you will support business development, shape client propositions, and deliver complex data governance engagements for major energy and utilities clients. You will act as the recognised authority on data governance within nxzen, bringing deep DAMA DMBOK expertise and hands on platform experience to every engagement. This is a hybrid role: delivery led with a strong business development component. You will personally lead complex engagements, work directly with client data teams, and build governance solutions alongside your team rather than delegating from a distance. The role spans the full lifecycle of data governance and data management: from executive level data vision and strategy advisory, through operating model design and organisational change, to hands on implementation and configuration of governance tooling such as Microsoft Purview and Collibra, and driving data adoption through use case discovery and implementation. You will be expected to roll up your sleeves and deliver, not just advise. You will build and coach a data governance practice line spanning the UK and India, develop strategic relationships with technology partners and industry bodies, alignment with the AI and Analytics practice line, and work closely with nxzen's client partners and cross practices to embed data governance into the broader service portfolio. Success in this role requires genuine subject matter depth, strong consulting acumen, an entrepreneurial mindset, and a sharp commercial focus. The role We are looking for a senior data governance leader with genuine subject matter expertise, not a project manager who has supervised governance programmes from a distance. We need someone who has personally designed governance frameworks, configured governance platforms, and run data quality remediation workstreams with their own hands. You will bring deep, hands on knowledge of DAMA DMBOK principles and their practical application, combined with real implementation experience on Microsoft Purview, Collibra, or Informatica (Cloud Data Governance and Catalog). CDMP certification (or equivalent DAMA credential) is strongly preferred. You will be highly client facing, commercially sharp, and comfortable working with onshore/offshore teams. An entrepreneurial mindset is essential, with the energy and vision to build and scale a new data governance practice. You must be equally credible advising a Chief Data Officer on data strategy as you are defining sensitivity labels in Purview or defining business glossary workflows in Collibra. Deep, hands on expertise in DAMA DMBOK key knowledge areas: Data Governance, Data Quality, Metadata Management, and Master and Reference Data. Supplementary knowledge in Data Architecture, Data Security, Data Integration and Interoperability, Document and Content Management, Data Warehousing and Business Intelligence. Proven hands on implementation experience with Microsoft Purview (data catalogue, sensitivity labelling, data classification, compliance policies, data lineage) and Collibra (business glossary, data dictionary, data quality rules, workflow configuration, stewardship assignments). Alation and Informatica (Cloud Data Governance and Catalog) are desirable, not essential. Track record of designing and delivering Data Operating Models, including organisational design, RACI definitions, stewardship networks, and governance council structures. Trusted advisor status with senior stakeholders in regulated industries, from Data Owners and CDOs to C suite. CDMP certification or equivalent DAMA credential strongly preferred; Practitioner or Master level ideal. Comfortable building and coaching onshore/offshore delivery teams, with experience developing capability in offshore centres (ideally India). Experience with UK energy and utilities clients, including familiarity with Ofgem, Ofwat, regulatory data and reporting requirements (highly desirable, not essential). Experience partnering with Client Partners on solution design, planning, and commercials for data governance engagements. Knowledge of Azure and/or AWS cloud data platforms (data lakes, data lakehouse, data mesh, data Fabric) as enabling infrastructure for governance solutions (desirable). Front of house presence with clients, able to run board level strategy workshops and configure governance tooling on site. Awareness of AI Governance and Guardrails frameworks, inclusive of responsible AI principles, model risk management, and the interaction between data governance and AI governance. Strong commercial judgment in shaping, pricing, and negotiating data governance engagements, including fixed price, time and materials, and managed service models. Credible voice in the data governance and data management community, aligned to nxzen's purpose and brand. Responsibilities Lead data governance consulting, pre sales, and senior stakeholder engagement across nxzen's energy and utilities client portfolio. Define and deliver Data Operating Model engagements for UK energy and utilities clients (covering electricity networks, gas distribution, water, renewables, and oil & gas). Shape proposals, solution options, and commercials with Client Partners, pricing and packaging data governance offerings as repeatable, scalable services. Represent nxzen as a credible data governance authority in the market, building visibility through thought leadership, industry events, and client workshops. Design and deliver end to end data governance frameworks aligned to DAMA DMBOK, covering data quality, metadata management, data cataloguing, data lineage, master and reference data management, data privacy, and regulatory compliance. Personally lead and execute implementation and configuration of Microsoft Purview and Collibra on client engagements, including data classification, sensitivity labelling, policy enforcement, data cataloguing, business glossary definition, and stewardship workflow design. Define and implement Data Operating Models covering organisational design, roles and responsibilities, decision rights, escalation paths, and performance metrics (data quality scorecards, compliance dashboards). Build and coach a data governance practice line with team members in the UK and India, developing capability across Data Stewardship, metadata management, data quality engineering, and governance tooling. Develop strategic partnerships with data governance platform vendors (Microsoft, Collibra) and advisory bodies (DAMA UK, industry regulators). Strengthen collaboration with nxzen's Global Capability Centre in India to scale delivery capacity and build a sustainable onshore/offshore governance delivery model. Advise clients on data governance maturity assessments, target state definition, and transformation roadmaps, with specific focus on Ofgem and Ofwat regulatory data requirements. Work alongside Client Partners to integrate data governance into broader nxzen engagements spanning data management, analytics, AI, asset intelligence, enterprise optimisation, and IT/OT transformation. Support the development of nxzen's AI Governance and Guardrails offering, ensuring responsible AI practices are grounded in robust data governance foundations. Contribute to nxzen's thought leadership on data governance in energy and utilities, including whitepapers, conference presentations, and client facing collateral. Support business development across nxzen's priority accounts.
30/07/2026
Full time
Data Governance Lead Introduction The Data Governance Lead will lead the growth and execution of nxzen's Data Governance, and Data Operating Models offerings in the UK market. Reporting to the UK Head of Data and AI, and working alongside the AI and Analytics Lead, you will support business development, shape client propositions, and deliver complex data governance engagements for major energy and utilities clients. You will act as the recognised authority on data governance within nxzen, bringing deep DAMA DMBOK expertise and hands on platform experience to every engagement. This is a hybrid role: delivery led with a strong business development component. You will personally lead complex engagements, work directly with client data teams, and build governance solutions alongside your team rather than delegating from a distance. The role spans the full lifecycle of data governance and data management: from executive level data vision and strategy advisory, through operating model design and organisational change, to hands on implementation and configuration of governance tooling such as Microsoft Purview and Collibra, and driving data adoption through use case discovery and implementation. You will be expected to roll up your sleeves and deliver, not just advise. You will build and coach a data governance practice line spanning the UK and India, develop strategic relationships with technology partners and industry bodies, alignment with the AI and Analytics practice line, and work closely with nxzen's client partners and cross practices to embed data governance into the broader service portfolio. Success in this role requires genuine subject matter depth, strong consulting acumen, an entrepreneurial mindset, and a sharp commercial focus. The role We are looking for a senior data governance leader with genuine subject matter expertise, not a project manager who has supervised governance programmes from a distance. We need someone who has personally designed governance frameworks, configured governance platforms, and run data quality remediation workstreams with their own hands. You will bring deep, hands on knowledge of DAMA DMBOK principles and their practical application, combined with real implementation experience on Microsoft Purview, Collibra, or Informatica (Cloud Data Governance and Catalog). CDMP certification (or equivalent DAMA credential) is strongly preferred. You will be highly client facing, commercially sharp, and comfortable working with onshore/offshore teams. An entrepreneurial mindset is essential, with the energy and vision to build and scale a new data governance practice. You must be equally credible advising a Chief Data Officer on data strategy as you are defining sensitivity labels in Purview or defining business glossary workflows in Collibra. Deep, hands on expertise in DAMA DMBOK key knowledge areas: Data Governance, Data Quality, Metadata Management, and Master and Reference Data. Supplementary knowledge in Data Architecture, Data Security, Data Integration and Interoperability, Document and Content Management, Data Warehousing and Business Intelligence. Proven hands on implementation experience with Microsoft Purview (data catalogue, sensitivity labelling, data classification, compliance policies, data lineage) and Collibra (business glossary, data dictionary, data quality rules, workflow configuration, stewardship assignments). Alation and Informatica (Cloud Data Governance and Catalog) are desirable, not essential. Track record of designing and delivering Data Operating Models, including organisational design, RACI definitions, stewardship networks, and governance council structures. Trusted advisor status with senior stakeholders in regulated industries, from Data Owners and CDOs to C suite. CDMP certification or equivalent DAMA credential strongly preferred; Practitioner or Master level ideal. Comfortable building and coaching onshore/offshore delivery teams, with experience developing capability in offshore centres (ideally India). Experience with UK energy and utilities clients, including familiarity with Ofgem, Ofwat, regulatory data and reporting requirements (highly desirable, not essential). Experience partnering with Client Partners on solution design, planning, and commercials for data governance engagements. Knowledge of Azure and/or AWS cloud data platforms (data lakes, data lakehouse, data mesh, data Fabric) as enabling infrastructure for governance solutions (desirable). Front of house presence with clients, able to run board level strategy workshops and configure governance tooling on site. Awareness of AI Governance and Guardrails frameworks, inclusive of responsible AI principles, model risk management, and the interaction between data governance and AI governance. Strong commercial judgment in shaping, pricing, and negotiating data governance engagements, including fixed price, time and materials, and managed service models. Credible voice in the data governance and data management community, aligned to nxzen's purpose and brand. Responsibilities Lead data governance consulting, pre sales, and senior stakeholder engagement across nxzen's energy and utilities client portfolio. Define and deliver Data Operating Model engagements for UK energy and utilities clients (covering electricity networks, gas distribution, water, renewables, and oil & gas). Shape proposals, solution options, and commercials with Client Partners, pricing and packaging data governance offerings as repeatable, scalable services. Represent nxzen as a credible data governance authority in the market, building visibility through thought leadership, industry events, and client workshops. Design and deliver end to end data governance frameworks aligned to DAMA DMBOK, covering data quality, metadata management, data cataloguing, data lineage, master and reference data management, data privacy, and regulatory compliance. Personally lead and execute implementation and configuration of Microsoft Purview and Collibra on client engagements, including data classification, sensitivity labelling, policy enforcement, data cataloguing, business glossary definition, and stewardship workflow design. Define and implement Data Operating Models covering organisational design, roles and responsibilities, decision rights, escalation paths, and performance metrics (data quality scorecards, compliance dashboards). Build and coach a data governance practice line with team members in the UK and India, developing capability across Data Stewardship, metadata management, data quality engineering, and governance tooling. Develop strategic partnerships with data governance platform vendors (Microsoft, Collibra) and advisory bodies (DAMA UK, industry regulators). Strengthen collaboration with nxzen's Global Capability Centre in India to scale delivery capacity and build a sustainable onshore/offshore governance delivery model. Advise clients on data governance maturity assessments, target state definition, and transformation roadmaps, with specific focus on Ofgem and Ofwat regulatory data requirements. Work alongside Client Partners to integrate data governance into broader nxzen engagements spanning data management, analytics, AI, asset intelligence, enterprise optimisation, and IT/OT transformation. Support the development of nxzen's AI Governance and Guardrails offering, ensuring responsible AI practices are grounded in robust data governance foundations. Contribute to nxzen's thought leadership on data governance in energy and utilities, including whitepapers, conference presentations, and client facing collateral. Support business development across nxzen's priority accounts.
Vice President, Business Information Security OfficerApplylocations: Londontime type: Full timeposted on: Posted Todayjob requisition id: -WD Do you want your voice heard and your actions to count? Discover your opportunity with Mitsubishi UFJ Financial Group (MUFG), one of the world's leading financial groups. Across the globe, we're 150,000 colleagues, striving to make a difference for every client, organization, and community we serve. We stand for our values, building long-term relationships, serving society, and fostering shared and sustainable growth for a better world.With a vision to be the world's most trusted financial group, it's part of our culture to put people first, listen to new and diverse ideas and collaborate toward greater innovation, speed and agility. This means investing in talent, technologies, and tools that empower you to own your career.Join MUFG, where being inspired is expected and making a meaningful impact is rewarded.Corporate Technology is accountable for the operation, development and support of all applications across all areas of the business. Corporate Technology ensures IT strategy, architecture and solutions are aligned to business requirements. The BISO role is part of the IT Security team. IT Security are collectively responsible for the following areas: Cyber Support and Engineering, Security Operations Centre covering pen tests, red and blue teams, Cyber and Risk Change portfolio, Threat Intelligence and Vulnerability Management for the Group and Identity and Access Management. NUMBER OF DIRECT REPORTS 2 MAIN PURPOSE OF THE ROLE Responsible for providing strategic information security leadership and oversight across all business units in the region. This role bridges global security strategy and regional business execution, ensuring that security, risk, and compliance objectives are effectively implemented, measured, and governed.The position partners closely with regional executives, technology leadership, and global security functions to embed a culture of security, drive control adoption, and maintain regulatory confidence.This role will work alongside the EMEA regional CISO on supporting the strategy, initiatives and roadmap for information security in MUFG EMEA. Working with key stakeholders internally to help embed security into the culture, whilst embedding technical controls into the mission critical business systems:Risk Advisory & Control Adoption Serve as the trusted advisor to business and technology units on security risks and control implementation. Support adoption of global security controls and standards within regional operations. Provide security input on new business initiatives, digital transformation, and third-party relationships.2. Security Training & Awareness Develop, tailor, and oversee delivery of security awareness programs by business line. Drive execution of phishing simulations and targeted learning interventions. Measure awareness effectiveness and report to management.3. Security Champion Network Establish and maintain a regional security champion community within business and operations teams. Promote local ownership of security best practices and risk reduction initiatives. Provide ongoing engagement, training, and recognition programs for champions.4. Security Strategy, Planning & Reporting Translate global and regional security objectives into actionable EMEA programs. Develop strategic plans, key risk metrics (KRIs/KPIs), and executive dashboards. Contribute to quarterly and annual reporting cycles for CISO and business leadership.5. Finance, Budgeting & Resourcing Support regional security budgeting, forecasting, and resource allocation. Track spend against plan and provide variance analysis. Assist in developing business cases for new initiatives or investments.6. Security Program Governance Oversee the implementation and governance of global security programs in EMEA. Ensure adherence to enterprise security policies and frameworks. Coordinate across multiple stakeholders to maintain governance and accountability.7. Risk, Compliance & Audit Coordination Act as the single point of contact for IT Security related audits and compliance engagements. Manage audit readiness, evidence coordination, and remediation tracking. Maintain strong relationships with internal audit, compliance, and regulatory teams.8. Reporting & Global/Regional Coordination Coordinate EMEA security reporting and represent the region in global BISO forums. Ensure consistency of risk posture and alignment with global metrics and governance. Provide regional input into global policy updates and program design. KEY RESPONSIBILITIES Communication & Training Manage the Cyber & Risk training program. Ensuring Cyber integration with the business and technology. Communicating Risk & Cyber information across Bank EMEA and Securities. Be an escalation point for concerns about IT Security. Be a positive collaborator. People Management Ensure that the function is appropriately organised and adequately resourced by staff with appropriate skillsets to achieve its strategic objectives. Lead, direct and manage staff within the function to ensure that they: + Understand the responsibilities applicable to their roles + Comply with the firm's policies and procedures + Conduct themselves in a manner commensurate with the firm's values Actively manage performance, develop talent, identify key positions and persons and create sustainable success plans. Oversee appropriate training is in place to fulfil current and future skill requirements. Culture and Leadership Actively lead the integration of Bank and Securities technology functions. Promote the MUFG values-led culture which is inclusive and diverse. Promote a dynamic, delivery driven culture that works alongside business units to provide responsive resolutions and value driven solutions. Collective leadership by example on staff cyber education and awareness to embed a proactive cyber culture. Find ways to strengthen working relationships with stakeholders, including business teams. Lead by example in building relationships across the bank, establishing a stronger peer network and helping to strengthen collaboration. Build strong relationships with internal and external stakeholders to understand industry best practice, influence change and promote technical credibility. WORK EXPERIENCE Experienced in information security, technology risk, or related disciplines within financial services sector. Experienced in IT security and control policy with specific experience of FFEIC, SOX, COBIT, NIST, CRI Profile and ISO standards. Conversant in the security & risk trends across banking and other industries. Experienced with the Defence in Depth approach Strong track record of managing teams and building effective partnerships with peers. Strong experience in delivering training Professional information security certifications (i.e. CISSP, CISM, CRISC or similar experience). Cloud Security experience and a good understanding of privacy legislation (Data Protection Act 2018 / GDPR). SKILLS AND EXPERIENCE Functional / Technical Competencies: Strong strategic and analytical thinking. Excellent communication and stakeholder management. Proven ability to balance technical, business, and regulatory priorities. Collaborative, pragmatic, and outcomes-driven leadership style. A deep understanding of IT and Cyber Security: + Defence in Depth model. + Network defence, IDS and DMZ + Network protocols and firewall standards + Detective monitoring - SIEM + Vulnerability Management + Access and Privileged Access Management Experienced in writing and maintaining IT documents, such as standards and procedures. Demonstrates an understanding of strategic business and IT issues impacting the financial services market. Strong understanding of risk and its application across technology and the business. Good understanding of project lifecycles. Education / Qualifications: Degree educated and / or equivalent experience. PERSONAL REQUIREMENTS Excellent Leadership skills Excellent communication skills Ability to manage constructive conflict effectively Strong facilitation skills Ability to build strong and lasting relationships across the bank Results driven, with a strong sense of accountability, focused on business outcomes A proactive, motivated approach. The ability to operate with urgency and prioritise work accordingly Strong decision-making skills, the ability to demonstrate sound judgement A structured and logical approach to work Strong problem-solving skills A creative and innovative approach to work Excellent interpersonal skills Excellent attention to detail and accuracy Strong numerical skills A confident approach, with the ability to provide clear direction to your team Excellent managerial/leadership experience The ability to articulate and implement the vision/strategy for the planning departmentWe are open to considering flexible working requests in line with organisational requirements.
30/07/2026
Full time
Vice President, Business Information Security OfficerApplylocations: Londontime type: Full timeposted on: Posted Todayjob requisition id: -WD Do you want your voice heard and your actions to count? Discover your opportunity with Mitsubishi UFJ Financial Group (MUFG), one of the world's leading financial groups. Across the globe, we're 150,000 colleagues, striving to make a difference for every client, organization, and community we serve. We stand for our values, building long-term relationships, serving society, and fostering shared and sustainable growth for a better world.With a vision to be the world's most trusted financial group, it's part of our culture to put people first, listen to new and diverse ideas and collaborate toward greater innovation, speed and agility. This means investing in talent, technologies, and tools that empower you to own your career.Join MUFG, where being inspired is expected and making a meaningful impact is rewarded.Corporate Technology is accountable for the operation, development and support of all applications across all areas of the business. Corporate Technology ensures IT strategy, architecture and solutions are aligned to business requirements. The BISO role is part of the IT Security team. IT Security are collectively responsible for the following areas: Cyber Support and Engineering, Security Operations Centre covering pen tests, red and blue teams, Cyber and Risk Change portfolio, Threat Intelligence and Vulnerability Management for the Group and Identity and Access Management. NUMBER OF DIRECT REPORTS 2 MAIN PURPOSE OF THE ROLE Responsible for providing strategic information security leadership and oversight across all business units in the region. This role bridges global security strategy and regional business execution, ensuring that security, risk, and compliance objectives are effectively implemented, measured, and governed.The position partners closely with regional executives, technology leadership, and global security functions to embed a culture of security, drive control adoption, and maintain regulatory confidence.This role will work alongside the EMEA regional CISO on supporting the strategy, initiatives and roadmap for information security in MUFG EMEA. Working with key stakeholders internally to help embed security into the culture, whilst embedding technical controls into the mission critical business systems:Risk Advisory & Control Adoption Serve as the trusted advisor to business and technology units on security risks and control implementation. Support adoption of global security controls and standards within regional operations. Provide security input on new business initiatives, digital transformation, and third-party relationships.2. Security Training & Awareness Develop, tailor, and oversee delivery of security awareness programs by business line. Drive execution of phishing simulations and targeted learning interventions. Measure awareness effectiveness and report to management.3. Security Champion Network Establish and maintain a regional security champion community within business and operations teams. Promote local ownership of security best practices and risk reduction initiatives. Provide ongoing engagement, training, and recognition programs for champions.4. Security Strategy, Planning & Reporting Translate global and regional security objectives into actionable EMEA programs. Develop strategic plans, key risk metrics (KRIs/KPIs), and executive dashboards. Contribute to quarterly and annual reporting cycles for CISO and business leadership.5. Finance, Budgeting & Resourcing Support regional security budgeting, forecasting, and resource allocation. Track spend against plan and provide variance analysis. Assist in developing business cases for new initiatives or investments.6. Security Program Governance Oversee the implementation and governance of global security programs in EMEA. Ensure adherence to enterprise security policies and frameworks. Coordinate across multiple stakeholders to maintain governance and accountability.7. Risk, Compliance & Audit Coordination Act as the single point of contact for IT Security related audits and compliance engagements. Manage audit readiness, evidence coordination, and remediation tracking. Maintain strong relationships with internal audit, compliance, and regulatory teams.8. Reporting & Global/Regional Coordination Coordinate EMEA security reporting and represent the region in global BISO forums. Ensure consistency of risk posture and alignment with global metrics and governance. Provide regional input into global policy updates and program design. KEY RESPONSIBILITIES Communication & Training Manage the Cyber & Risk training program. Ensuring Cyber integration with the business and technology. Communicating Risk & Cyber information across Bank EMEA and Securities. Be an escalation point for concerns about IT Security. Be a positive collaborator. People Management Ensure that the function is appropriately organised and adequately resourced by staff with appropriate skillsets to achieve its strategic objectives. Lead, direct and manage staff within the function to ensure that they: + Understand the responsibilities applicable to their roles + Comply with the firm's policies and procedures + Conduct themselves in a manner commensurate with the firm's values Actively manage performance, develop talent, identify key positions and persons and create sustainable success plans. Oversee appropriate training is in place to fulfil current and future skill requirements. Culture and Leadership Actively lead the integration of Bank and Securities technology functions. Promote the MUFG values-led culture which is inclusive and diverse. Promote a dynamic, delivery driven culture that works alongside business units to provide responsive resolutions and value driven solutions. Collective leadership by example on staff cyber education and awareness to embed a proactive cyber culture. Find ways to strengthen working relationships with stakeholders, including business teams. Lead by example in building relationships across the bank, establishing a stronger peer network and helping to strengthen collaboration. Build strong relationships with internal and external stakeholders to understand industry best practice, influence change and promote technical credibility. WORK EXPERIENCE Experienced in information security, technology risk, or related disciplines within financial services sector. Experienced in IT security and control policy with specific experience of FFEIC, SOX, COBIT, NIST, CRI Profile and ISO standards. Conversant in the security & risk trends across banking and other industries. Experienced with the Defence in Depth approach Strong track record of managing teams and building effective partnerships with peers. Strong experience in delivering training Professional information security certifications (i.e. CISSP, CISM, CRISC or similar experience). Cloud Security experience and a good understanding of privacy legislation (Data Protection Act 2018 / GDPR). SKILLS AND EXPERIENCE Functional / Technical Competencies: Strong strategic and analytical thinking. Excellent communication and stakeholder management. Proven ability to balance technical, business, and regulatory priorities. Collaborative, pragmatic, and outcomes-driven leadership style. A deep understanding of IT and Cyber Security: + Defence in Depth model. + Network defence, IDS and DMZ + Network protocols and firewall standards + Detective monitoring - SIEM + Vulnerability Management + Access and Privileged Access Management Experienced in writing and maintaining IT documents, such as standards and procedures. Demonstrates an understanding of strategic business and IT issues impacting the financial services market. Strong understanding of risk and its application across technology and the business. Good understanding of project lifecycles. Education / Qualifications: Degree educated and / or equivalent experience. PERSONAL REQUIREMENTS Excellent Leadership skills Excellent communication skills Ability to manage constructive conflict effectively Strong facilitation skills Ability to build strong and lasting relationships across the bank Results driven, with a strong sense of accountability, focused on business outcomes A proactive, motivated approach. The ability to operate with urgency and prioritise work accordingly Strong decision-making skills, the ability to demonstrate sound judgement A structured and logical approach to work Strong problem-solving skills A creative and innovative approach to work Excellent interpersonal skills Excellent attention to detail and accuracy Strong numerical skills A confident approach, with the ability to provide clear direction to your team Excellent managerial/leadership experience The ability to articulate and implement the vision/strategy for the planning departmentWe are open to considering flexible working requests in line with organisational requirements.
Jobtailor is seeking an Information Security Officer in a UK-regulated financial services context. The ISO will work with the CRO and DPO to ensure robust policies, standards and control frameworks across the organisation. The role collaborates with 1st Line teams to provide independent assurance and drive transformational change while raising information security awareness at executive level.
30/07/2026
Full time
Jobtailor is seeking an Information Security Officer in a UK-regulated financial services context. The ISO will work with the CRO and DPO to ensure robust policies, standards and control frameworks across the organisation. The role collaborates with 1st Line teams to provide independent assurance and drive transformational change while raising information security awareness at executive level.
Overview Sitting in our 2nd Line Function, the Information Security Officer (ISO) plays a pivotal role in helping the bank achieve its growth ambitions in a compliant and secure manner. Working with the Chief Risk Officer and Data Protection Officer, the role holder will ensure the bank has robust and proportionate policies, standards and control frameworks in place. Working with 1st Line colleagues from across the bank, particularly those responsible for Information Security, IT, Operational Resilience and the management, storage and use of data, will provide independent assurance of the efficacy of the control environment and support the delivery of projects and transformational change. A trusted expert and critical friend, the individual will be responsible for working directly with the bank's Executive Team and Board to ensure they have a transparent understanding of the bank's risk posture and responsible for increasing Information Security awareness, skills and understanding across the bank. Responsibilities Provide independent assurance of the control environment by working with 1st Line colleagues across Information Security, IT, Operational Resilience and the management, storage and use of data. Support the delivery of projects and transformational change while promoting information security awareness across the bank. Collaborate with the Executive Team and Board to communicate risk posture and information security considerations clearly. Requirements A minimum of 5 years' experience in a second line information security, GRC or data protection role within a UK regulated financial services firm. Working knowledge of PRA and FCA expectations, UK GDPR, PECR and operational resilience requirements. Experience running security awareness programmes, including phishing simulations and e-learning platforms. Working knowledge of Microsoft Purview 9DLP (Insider Risk management, Communication Compliance) and the wider Microsoft E5 security stack. Experience responding to internal and external audits and drafting Board and committee papers. Experience of third-party security due diligence and supplier risk assessments. Relevant certifications such as CISSP, CISM, CRISC, CIPP/E or ISO 27001 Lead Auditor (desirable).
30/07/2026
Full time
Overview Sitting in our 2nd Line Function, the Information Security Officer (ISO) plays a pivotal role in helping the bank achieve its growth ambitions in a compliant and secure manner. Working with the Chief Risk Officer and Data Protection Officer, the role holder will ensure the bank has robust and proportionate policies, standards and control frameworks in place. Working with 1st Line colleagues from across the bank, particularly those responsible for Information Security, IT, Operational Resilience and the management, storage and use of data, will provide independent assurance of the efficacy of the control environment and support the delivery of projects and transformational change. A trusted expert and critical friend, the individual will be responsible for working directly with the bank's Executive Team and Board to ensure they have a transparent understanding of the bank's risk posture and responsible for increasing Information Security awareness, skills and understanding across the bank. Responsibilities Provide independent assurance of the control environment by working with 1st Line colleagues across Information Security, IT, Operational Resilience and the management, storage and use of data. Support the delivery of projects and transformational change while promoting information security awareness across the bank. Collaborate with the Executive Team and Board to communicate risk posture and information security considerations clearly. Requirements A minimum of 5 years' experience in a second line information security, GRC or data protection role within a UK regulated financial services firm. Working knowledge of PRA and FCA expectations, UK GDPR, PECR and operational resilience requirements. Experience running security awareness programmes, including phishing simulations and e-learning platforms. Working knowledge of Microsoft Purview 9DLP (Insider Risk management, Communication Compliance) and the wider Microsoft E5 security stack. Experience responding to internal and external audits and drafting Board and committee papers. Experience of third-party security due diligence and supplier risk assessments. Relevant certifications such as CISSP, CISM, CRISC, CIPP/E or ISO 27001 Lead Auditor (desirable).
Randox Laboratories continues to develop disruptive innovations in Diagnostics and Healthcare globally. Our staff are at the heart of everything we do and achieve. We have an exciting new career opportunity for an Information Security Manager within our IT team. Please note, given the nature of this role, the successful candidate will require to undertake an AccessNI background check. Location: Randox Science Park, 30 Randalstown Road, Antrim, BT41 4FL (Onsite) Contract Offered: Full-time, Permanent, Onsite working. Working Hours: 40 hours per week, Monday to Friday. What does the IT Security Manager role involve? This role will be responsible for leading and developing a small team of IT Security Analysts to deliver a comprehensive information and security plan for Randox ensuring all IT systems, data, and access are secured and protected. The successful candidate would also serve as the company compliance officer with respect to security policies and regulations. Responsibilities Carrying out technical vulnerability assessments of IT systems and processes, identifying potential vulnerabilities, making recommendations to control any risks identified and to ensure they are implemented. Developing and maintaining the information security policy, accompanying standards and procedures. Responding rapidly and effectively to IT security incidents, managing them in a professional manner including computer forensics for evidence gathering and preservation. Promoting security awareness by developing and implementing a security awareness and training programme. Working with internal stakeholders to promote and improve information security and provide security advice on procurements, projects, and new initiatives as required. Applying the Data Protection Act, the Freedom of Information Act, and other related legislation, standards and codes of practice. Staying on top of emerging trends, risks, new guidance or standards, and security-enhancing technologies. Conducting network security analysis, monitoring and incident response, as well as maintenance and configuration of network security tools. Leading and delivering change and contributing to a positive working environment. Essential Criteria Higher-level qualification in an IT Discipline. A minimum of 5 years' experience in IT security or related field. Experience leading a team. Excellent working knowledge of Information Security (including ISO27001) Experience of phishing campaigns and user awareness training. Broad awareness of hardware/software security products. Professional attitude towards learning and development. Right to work in the UK. About Randox An international company operating in over 145 countries that continues to have unparalleled growth, Randox Laboratories has been the heartbeat of the UK's National COVID Testing Programme throughout the pandemic. In early 2020 Randox recognised the threat from COVID-19 and, based on over 40 years of diagnostic experience, quickly developed a test to accurately identify the virus. Additionally, as a world leader in diagnostics for clinical healthcare, toxicology and food security, our expertise and product portfolio have assisted laboratories across the world in improving health and saving lives. Randox Laboratories Limited is an Equal Opportunities Employer.
18/07/2026
Full time
Randox Laboratories continues to develop disruptive innovations in Diagnostics and Healthcare globally. Our staff are at the heart of everything we do and achieve. We have an exciting new career opportunity for an Information Security Manager within our IT team. Please note, given the nature of this role, the successful candidate will require to undertake an AccessNI background check. Location: Randox Science Park, 30 Randalstown Road, Antrim, BT41 4FL (Onsite) Contract Offered: Full-time, Permanent, Onsite working. Working Hours: 40 hours per week, Monday to Friday. What does the IT Security Manager role involve? This role will be responsible for leading and developing a small team of IT Security Analysts to deliver a comprehensive information and security plan for Randox ensuring all IT systems, data, and access are secured and protected. The successful candidate would also serve as the company compliance officer with respect to security policies and regulations. Responsibilities Carrying out technical vulnerability assessments of IT systems and processes, identifying potential vulnerabilities, making recommendations to control any risks identified and to ensure they are implemented. Developing and maintaining the information security policy, accompanying standards and procedures. Responding rapidly and effectively to IT security incidents, managing them in a professional manner including computer forensics for evidence gathering and preservation. Promoting security awareness by developing and implementing a security awareness and training programme. Working with internal stakeholders to promote and improve information security and provide security advice on procurements, projects, and new initiatives as required. Applying the Data Protection Act, the Freedom of Information Act, and other related legislation, standards and codes of practice. Staying on top of emerging trends, risks, new guidance or standards, and security-enhancing technologies. Conducting network security analysis, monitoring and incident response, as well as maintenance and configuration of network security tools. Leading and delivering change and contributing to a positive working environment. Essential Criteria Higher-level qualification in an IT Discipline. A minimum of 5 years' experience in IT security or related field. Experience leading a team. Excellent working knowledge of Information Security (including ISO27001) Experience of phishing campaigns and user awareness training. Broad awareness of hardware/software security products. Professional attitude towards learning and development. Right to work in the UK. About Randox An international company operating in over 145 countries that continues to have unparalleled growth, Randox Laboratories has been the heartbeat of the UK's National COVID Testing Programme throughout the pandemic. In early 2020 Randox recognised the threat from COVID-19 and, based on over 40 years of diagnostic experience, quickly developed a test to accurately identify the virus. Additionally, as a world leader in diagnostics for clinical healthcare, toxicology and food security, our expertise and product portfolio have assisted laboratories across the world in improving health and saving lives. Randox Laboratories Limited is an Equal Opportunities Employer.
