Information Security Manager

Life can sometimes be unpredictable, and it pays to plan ahead. Our aim at Legal & General Retail is to help our customers plan for the unexpected, achieve financial security for their tomorrow, and protect everything that’s important to them. To better understand our customers and meet their needs, we’ve brought our protection, retirement income, savings, lending and advice, fintech and mortgage businesses under one umbrella. Created at the start of 2022 through the merging of our long-standing and trusted retail retirement and insurance businesses, we’re a fast-growing division with big, customer-centered ambitions. 

We have an exciting new opportunity for a seasoned Information Security professional to join our retail business. 

The primary responsibility of the Information Security Manager is to manage the security assurance activities across all cyber security services delivered by Legal & General Surveying Service (LGSS), third parties, and any other providers of information technology services.

The role holder will be responsible for data protection activities and delivering security training and awareness across the business.

What you'll be doing

• Designing and documenting the security assurance schedule and corresponding metrics and key risk indicator for measuring the effectiveness of the assurance programme.
• Providing trusted information and expertise on Information Security to LGSS applying a pragmatic “Security by Design” approach.
• Establishing and maintaining effective relationships within the business, within the wider Group Technology space and build and maintain relationships with Group CISO to ensure cross-divisional collaboration.
• Ensuring CISO security standards are understood and met by the Divisions IT or a robust plan to achieve them is in place. Completing all reporting requirements both intra-division and from the office of the CISO, ensuring senior stakeholders have a clear understanding of what LGSS security risks are and what plans or strategies are in place to mitigate these.
• Managing relationship and performance of security testing service providers. Creating and tracking a calendar of testing and controls for these third parties and ensure any actions identified through testing are tracked appropriately and closed in order to ensure planning and execution of these tests is effective in identifying Legal and General’s key security risks
• Conducting audit and assurance to any third parties as required and leading the response for any internal or external audits.

• Excellent understanding and practice of IT architecture, infrastructure and Information Security.
• Knowledge and understanding of business processes and needs, and the ability to interpret these into innovative security solutions to meet business requirements.
• Highly organised with a structured approach to service management and has an open approach to change and innovation.
• Structured approach to incident and crisis management – experience of contributing to major security incident management.
• Ability to coordinate IT and Information Security and Risk Stakeholders in a complex organisation.
• Substantial experience managing IT Security
• Experience in Technology Risk Management in 1st, 2nd and 3rd line.
• Excellent team and people management skills, ability to inspire, develop and mentor individuals.
• Appropriate security qualifications and memberships (e.g. ISO27001, CISSP, CISA, ITIL, COBIT, CRISC, CGEIT etc.) are desirable.

If you’d like to be considered for this role, please submit your application through our careers website as we’re not accepting email applications.

The brand with the brolly is choosing today to change tomorrow.

Since 1836, we’ve grown to become one of the world's largest asset managers, homebuilders, pension providers and insurance brands. 

We’re all here to improve the lives of our customers, build a better society for the long term, and create value for our shareholders - helping to shape a better future for society and the planet.

We need people who share our ambitions, agility and entrepreneurial spirit to help us do it.

At L&G, you’ll find a balance that helps you be your best. Empowered by hybrid working, we’re supported by technology and workplaces that enable us to work effectively wherever we are. We come together in offices to collaborate and connect, and use time at home for individual, focused activities. And, when we achieve great things, we celebrate our success and reward strong performance.

Today, there’s over 10,000 of us, working towards our mission, with plenty of opportunities to grow your career as we grow L&G. Will you join us?

Great minds don’t have to think alike, so we welcome voices from all backgrounds. Bringing together people with different life experiences helps us build empathy with our customers and drive innovation.

We don’t just talk about it, we actively promote diversity and equitable opportunities for all. That means our employment decisions are made without regard to race, colour, religion, national or ethnic origin, sex, sexual orientation, gender identity or expression, age, disability or protected veteran status. In fact, we embrace every dimension of diversity to reflect the customers and communities we serve.

We think it’s important to create an inclusive environment where we can all belong, contribute and drive progress, where you can develop and grow, and be empowered. We want you to use your voice to help us build a better tomorrow.

We all work differently, and have different needs, which is why. we’re always open to discussing flexible working arrangements. Likewise, we’re committed to finding reasonable accommodations for candidates with specific needs during our recruiting process.

So whoever you are, wherever you are, whatever your story, we'd love to hear from you.