Information Security Risk Manager

Salary: £55,000 - 95,000 per year

Requirements:

• Experience in Information Security, Cyber Risk, or IT Risk roles
• Strong background in Information Security frameworks such as ISO 27001 and NIST
• Experience operating in a Second Line of Defence or advisory role
• Proven ability to provide independent challenge and constructive escalation to senior management
• Experience in complex, multi-entity, or international organisations is highly desirable
• Deep expertise in cybersecurity and information security risks
• Broad understanding of enterprise risk management frameworks
• Knowledge of operational resilience and third-party risk
• Strong influencing skills with the ability to challenge constructively
• Ability to present confidently to senior committees and leadership teams
• A degree in Information Security, IT, Computer Science, or a related field, or equivalent experience
• Insurance or financial services experience is beneficial but not essential

Responsibilities:

• Provide independent second line oversight on Information Security and Cyber risks across UK entities
• Review and challenge first line IT and business controls, risk assessments, and remediation activities
• Monitor risk exposure and ensure timely and effective closure of control gaps
• Drive the implementation and embedding of the Munich Re Group Information Security Management framework
• Ensure alignment with UK regulatory expectations and internal policies
• Translate regulatory and Group requirements into actionable control frameworks
• Act as the ISO for UK entities, providing risk leadership on Information Security matters
• Serve as a trusted advisor to senior stakeholders on cyber and information risk topics
• Provide Information Security risk opinions on IT and cyber initiatives, business change programmes, and third-party relationships
• Support entity-level risk identification, assessment, and treatment planning
• Support management of cyber and information security incidents, providing independent risk input
• Contribute to business impact assessments and operational resilience activities from a cyber security perspective
• Ensure effective management of outsourcing and supplier cyber risks
• Deliver clear, insightful reporting to governance committees and senior management, including Exco and Board forums
• Communicate risk exposures, trends, and key issues with clarity and impact
• Build strong relationships across IT, Risk, Compliance, and business teams

Technologies:

• Support
• Security

More:

We are Munich Re Specialty – Global Markets (MRS-GM), and our ambition is to become the leading Primary Specialty Insurance provider, underpinned by an effective and adaptable strategy, superior products, and industry leaders working in a supportive environment. We foster a strong culture where people are encouraged to be present, bold, and curious so they can achieve their individual goals. This Information Security Risk Manager role is based in London and sits within our Second Line of Defence across three UK entities, offering high visibility and dotted-line reporting into our Group IRM function in Munich. We offer a hybrid working environment and a benefits package that includes 25 days annual leave plus bank holidays, a 10% non-contributory pension, annual bonus eligibility, private medical and dental insurance, critical illness insurance, life assurance, permanent health insurance, a wellbeing and development scheme, EAP, health assessments, an electric vehicle salary sacrifice scheme, study and continuing professional development support, and IT home set-up support. We are committed to diversity, equity, inclusion, and ESG, and we encourage applicants even if their experience does not match every requirement.

last updated 35 week of 2026