Head of Cyber Security

An exciting opportunity has arisen to join Admiral Money's Cyber Security team on a permanent basis.  

About Admiral Money

Admiral Money is an exciting, new division of Admiral Group. We have the freedom and innovation of a small start up with the security of a large parent company, Admiral. 

The journey started when we launched unsecured personal loans in June 2017. We went on to be the first direct to consumer car finance provider in December 2017. Since then, we have gone from strength to strength and have some exciting plans for the future.

We’re looking for people who are keen to learn, excited about getting stuck in and are ready for a challenge to help us to achieve our aim of creating a special lending business for our customers. 

The Role

The Head of Cyber Security will take responsibility for the management ofthe Cyber Security team, as well as owning and delivering the Cyber Security roadmap and strategy.

This is a senior role that requires both strategic and hands on leadership across the Cyber Security function. You will:

• Enable the delivery of outstanding technology platforms that are highly secure, and secured by design
• Be an enabler for the business, whilst keeping the business safe from harm; maintain the strong relationships between Infrastructure, Engineering, and IT Ops where Cyber is seen as an enabling partner rather than a blocker
• Create the right environment to attract, assess and retain top talent, including developing relevant compensation packages and enabling cyber specialiststo continuously maintain and improve their technical and non-technical skills
• Keep abreast of cyber technology developments in the broader market, and make recommendations, ensuring these are understood and where appropriate exploited across the business to increase value, and enhance protection
• Be the face and voice of Cyber Security within Admiral Money, championing and promoting best practices, and the importance of everyone’s role in keeping our business safe

Responsibilites

• Collaborate with the Technology Leadership Team, the Senior Management Team, Product Leaders, and the wider teams to anticipate, develop, and resource the necessary cyber security needs
• Lead and scale the cyber security function as the business continues to grow including people management, supplier/contract management, budgeting, and strategy/roadmap development 
• Delivery of security services including (but not limited to) – Security Operations, Threat and Vulnerability Management, Privileged Identity Management, Identity and Access Management, Data Loss Prevention, and Penetration Testing
• Play an active role in IT projects and processes such as change/release management, to assess from a security perspective
• Work with colleagues in risk, compliance, and audit functions to ensure adherence to internal/external standards and best practice
• Act as a subject matter expert on cyber security, providing advice and guidance to the business. Challenge the status quo to drive positive security outcomes
• Promote secure software development and drive “secure by design” thinking alongside the Engineering and DevOps functions
• Oversee and improve processes relating to security supply chain risk management for our network of third parties and partners
• Delivery reviews and risk assessments to ensure technologies are compliant with security standards, regulatory standards, and good practice
• Manage cyber security incidents, engaging other stakeholders as required
• Ensure BAU security operations are dealt with efficiently in line with SLAs
• Stay up-to-date with on the latest security technologies, and recommend new security measures as needed to maintain/improve risk position
• Develop a happy and talented team ensuring that the culture within the department reflects the four pillars of “Communication, Equality, Reward and Recognition and Fun”

Skills and Experience

• Experience operating within heavily regulated environments including external regulated consumer products and service offerings
• Excellent communicator with ability to negotiate, influence and explain, particularly to large business teams and across a geographically distant area
• Drive, enthusiasm, and a can-do attitude
• Practical knowledge of the industry and professional standards
• Extensive senior technology leadership experience with a focus on Cyber Security
• Knowledge of information security exploits and threats
• Solid experience in performing IT Security solution design reviews/risk assessments and providing best practice advice to all levels
• Ability to assimilate information quickly, clearly identify key issues and present information concisely
• The ability to learn and develop your skills and understanding across a broad range of topics
• Degree level qualification in a related discipline (i.e. Security, Computing, Information Systems) or equivalent work experience in a large organisation

Desirables 

• Good knowledge of modern technologies and security implications of these including Kubernetes and containerisation
• Familiarity with cloud computing and cloud specific attack vectors – specifically AWS, Azure, Microsoft 365
• Security certifications such as CISSP, CISM, and cloud technology specific certifications
• Experience of supporting cyber security response and recovery efforts

Salary, Benefits and Work-Life Balance

At Admiral, we are proud to be a diverse business where we put our people and customers first. We have great benefits to ensure employees have a great work-life balance; it's one of the reasons we’re consistently voted one of the Sunday Times Best Big Companies to Work For in the UK.

All colleagues will receive 33 days holiday (including banks holidays) when they join us, and this will increase with length of service, up to a maximum of 38 days (including banks holidays). You also have the option to buy or sell up to five days of annual leave in addition to your allocation.

You can also view some of our other key benefits here

Our Commitment to You

At Admiral, we are committed to being a diverse and inclusive workplace. Admiral is proud to be an equal opportunities employer and does not discriminate on the basis of race, sex (including pregnancy, childbirth, reproductive health decisions, or related medical conditions), national origin, gender, gender identity, sexual orientation, disability, age, or any other legally protected status.

All qualified applicants will receive equal consideration.

#LI-HJ1 #LI-Money