Lead Cyber Security Engineer

This role requires a highly skilled and strategic Lead Cyber Security Engineer to drive the design, implementation, and oversight of our organization's security infrastructure. This role is pivotal in safeguarding critical systems and data, leading incident response efforts, and mentoring a team of security professionals. The ideal candidate will bring deep technical expertise, a proactive mindset, and a strong understanding of evolving threat landscapes to ensure robust protection across all digital assets.

• Act as the reporting line for Cyber Security Engineers and Analysts
• Be an Escalation point from the business or Cyber Security staff for incidents and issues including covering outside of business hours where required
• Operational IT security, including the monitoring and maintenance of IT security tools, such as Security Incident & Event Management (SIEM), anti-virus, and vulnerability management platforms
• Assist with task planning for team members
• Review and/or make changes to technical policies
• Validation and risk assessment of newly identified vulnerabilities
• Support the CISO to deliver risk-based improvements, including public-facing websites and services
• Assist with IT security gap and risks assessments including CIS, ISO 27001 and Cyber Security Essentials
• Producing KPI/KRI reports
• Assist with internal audit and external audit
• Work on an on-call rota for out of hours incident escalations.

• Experience of overseeing and managing complex and varied technology issues
• Ability to communicate technical information to both technical and non-technical staff across the Group
• Extensive practical operational security experience within an end-user organisation

• Experience of working with or within…

• software development teams to delivery internally and externally facing applications.

• data teams to ensure highly available and resilient data to support operations.

• technical project teams to deliver complex and large-scale infrastructure projects.

• IT service desk to deliver swift resolution and fantastic customer service.

• In depth knowledge of IT systems and applications.

• Experience of managing third party supplier relationships.
• Experience of implementing and maintaining a cloud strategy.
• Excellent communicator.
• A solid technical understanding and strong knowledge of Cyber security best practice, common attack types and detection/prevention methods, including CISecurity Benchmarks, OWASP and NIST guidelines.
• Strong documentation skills.
• Stakeholder Management.
• Team player.
• Flexible and approachable.
• Ability to work under pressure on multiple workstreams to tight deadlines.
• Experience of working within regulated businesses.
• One or more relevant Cyber security qualifications from a recognised body, such as GIAC GSEC and ISC2 CISSP (highly desirable).

We are a specialist professional services and technology firm, working in partnership with leading insurance, highly regulated and global businesses.

We help our clients to manage risk, operate their core business processes, transform and grow. We deliver professional services and technology solutions across the risk and insurance value chain, including excellence in claims, underwriting, distribution, regulation & risk, customer experience, human capital, digital transformation & change management.

Our global team of more than 8,000 professionals operate across ten countries, including the UK & the U.S. Over the past ten years Davies has grown its annual revenues more than 20-fold, investing heavily in research & development, innovation & automation, colleague development, and client service. Today the group serves more than 1,500 insurance, financial services, public sector, and other highly regulated clients.