Head of IT Security and Technology Governance

Job Purpose:

The Head of IT Security and Technology Governance serves as the primary information security leader for the business unit, with a dotted-line reporting relationship to the Group Chief Information Security Officer (CISO). The role is responsible for driving the local IT Security function, leading technology governance initiatives, ensuring compliance with security policies and standards, and strengthening the organization's overall security posture.

Partners closely with local IT teams, Group IT Security, shared service teams, vendors, and business stakeholders to implement security programs, manage risks, and ensure that security requirements are embedded across all technology initiatives.

Education & Certification:

• Bachelor's Degree in Information Technology, Computer Science, Information Security, Cybersecurity, or a related discipline.

• Master's Degree is an advantage.

• CISSP (Certified Information Systems Security Professional), CRISC (Certified in Risk and Information Systems Control), or equivalent security certifications preferred.

Experience:

• Minimum of 8 years of progressively responsible experience in Information Security or IT Security Management, preferably within the financial services or insurance industry.

• Proven experience leading Business IT Security functions and governance programs.

• Experience working in complex, multicultural, and geographically distributed environments.

• Demonstrated success in implementing security programs, risk management frameworks, and governance initiatives.

Technical Competencies

• Strong knowledge of information security domains, frameworks, and best practices.

• Expertise in cybersecurity governance, risk management, compliance, and security operations.

• Knowledge of security architecture, secure software development, and technology risk management.

• Understanding of regulatory and compliance requirements within financial services and insurance industries.

Leadership Competencies

• Strong leadership and stakeholder management skills.

• Excellent communication, presentation, and influencing abilities.

• Strong analytical and problem-solving capabilities.

• Ability to collaborate effectively across business, technology, and security teams.

Preferred Knowledge

• Working knowledge of the insurance industry and related business processes.

• Understanding of enterprise technology governance and control frameworks.

• Experience coordinating with global or regional security functions.