Referment is working with a fast-growing short-term insurance provider, part of a larger group of UK comparison and financial brands. As Information Security Manager, you will join at a critical stage of growth and take ownership of the information security strategy, with the autonomy to shape policies, standards and controls from the ground up.

The Role You will coordinate, define and improve the information security strategy to meet business requirements and executive policies, and identify and manage security risks across the organisation. You will evolve policies, standards and procedures, ensure staff understand and live security, and make sure standards and controls operate across all IT services, maintaining systems and operations to identify and eliminate vulnerabilities through routine practices such as vulnerability scanning and software patching, as well as strategic solutions. You will work in a small, close-knit team in an entirely cloud-native organisation that already uses platforms like Vanta to keep compliance and controls sharp rather than manual. As the business scales, there is real scope to bring GenAI into how risk is managed, and the opportunity to build out a security function of your own.

What We’re Looking For

• A background in information security and an appreciation of how security can enable businesses
• Experience working in a cloud-native organisation
• A record of documenting controls, standards and procedures
• A proven track record in an information security management role, implementing operational best practices through effective policies, standards and controls, and assuring business continuity
• Things that would set you apart: using GenAI to drive better security practice, privacy or data protection knowledge, relevant certifications such as CISSP, CRISC or CISM, and strong project or programme management skills

This role is based in London, with travel to the Fleet office when needed, and combines office and home working each week.

This could suit an information security professional who wants hands-on ownership of a security function in a scaling, cloud-native business, rather than a heavily process-driven environment.

Referment