cover image
Allianz UK

Head of Information Security - GRC (12 Month FTC)

Hybrid

Guildford, United kingdom

Full Time

12-03-2026

Share this job:

Skills

Leadership Adaptability Risk Management Test Quality Assurance Sales Training Risk Identification Risk Assessment Risk Mitigation

Job Specifications

Role Description

Reporting to the Chief Information Security Officer (CISO), you will lead the governance, risk, and compliance (GRC) function for Information Security across Allianz UK, including the supplier assurance team. This role ensures alignment with internal frameworks, regulatory requirements, and industry standards..

Further you will be pivotal in driving the security culture of Allianz and leading our outreach and Information Security risk agenda across our supplier ecosystem

Key Accountabilities

Governance & Strategy

Define and execute the InfoSec governance strategy aligned to business objectives and corporate risk appetite.
Lead the Governance I annual self-assessment, ensuring alignment with Allianz Group expectations.
Oversee the annual NIST, Cyber Essentials certification and PCI-DSS attestation processes.
Ensure compliance with Allianz frameworks (AFRIT, AFRIS, AFIRM) and UK regulatory standards.
Develop and maintain the InfoSec control framework, integrating with AZC and AZP change governance.

Risk Management

Own and manage Archer GRC platform activities, including risk identification, assessment, mitigation, and reporting.
Maintain the InfoSec risk register and ensure timely resolution of actions by risk owners.
Provide assurance that InfoSec risks are monitored and managed across operational and change environments.
Engage with Board Risk Committee, Compliance, and Audit to ensure InfoSec risk management is aligned with enterprise governance.

Supplier Assurance

Oversee the information security assurance of third-party suppliers, ensuring alignment with internal policies and regulatory requirements.
Maintain a supplier risk assessment framework, including onboarding, periodic reviews, and exit processes in line with Group requirements.
Ensure suppliers meet contractual InfoSec obligations and provide evidence of compliance (e.g. certifications, assessments).
Collaborate with Procurement, Legal, and Risk teams to manage supplier-related risks and remediation activities.
Escalate key risks and issues to information security and OPSIT leadership as necessary

Reporting & Assurance

Lead the production of Executive governance reporting and submissions to Allianz Group and local Stakeholders.
Deliver regular Board-level reporting on information security posture, risk trends, and compliance status.
Act as IRCS Risk Officer for InfoSec, supporting AZC and AZP risk committees with governance MI.
Evaluate risk mitigation and audit response plans, escalating risks beyond appetite to senior leadership.

Collaboration & Oversight

Partner with the wider OpsIT function and the business to embed InfoSec controls across BAU and project activities.
Ensure delivery of InfoSec quality, standards, and assurance functions with effective performance tracking.
Monitor the effectiveness of InfoSec controls and escalate deficiencies to the CIO and senior leadership.

Technical Skills

Lead and oversee robust IS Governance & Risk frameworks based on industry standards within delivery methods and processes
Ability to produce reports, presentations and formal papers for senior stakeholders
Manage comprehensive security risk catalogue with clear ownership and tracking mechanisms
Enhance security controls within IT delivery methods and associated processes
Ensure quality assurance of security elements in change projects, collaborating with Change Directors
Partner with CIO to maintain comprehensive security control oversight across operational environments
Document, test, and remediate key security controls to maintain a secure technology environment
Track and escalate audit findings, ensuring timely remediation of security issues
Business-focused security mindset with strong customer orientation
Adaptability to evolving threat landscape
Strategic relationship management across technical and business stakeholders

Experience

Extensive relevant experience in Information Security and risk management
Strong track record of Group alignment and CXO committee exposure preferred.
Business knowledge of the insurance sector preferred.
Consulting experience or Customer facing sales experience preferred.
Experience in using presentation tools to a high standard

What We Will Offer You

Recognised and rewarded for a job well done, we have a range of flexible benefits for you to choose from- so you can pick a package that’s perfect for you. We also offer flexible working options, global career opportunities across the wider Allianz Group, and fantastic career development and training. That’s on top of enjoying all the benefits you’d expect from the world’s number one insurance brand, including:

Flexible buy/sell holiday options
Hybrid working
Annual performance related bonus
Contributory pension scheme
Development days
A discount up to 50% on a range of insurance products including car, home and pet
Retail discounts
Volunteering days

Our Ways of Working

Do you need flexibility with the hours you work? Let us know a

About the Company

Allianz UK is part of the Allianz Group, one of the world's leading financial services providers with more than 88 million customers in over 70 different countries. In the UK, we offer a range of commercial and personal lines insurance products. We provide insurance for businesses, from sole traders to large commercial organisations, which are sold through independent brokers. We sell personal home, car and travel insurance through our LV= brand and we insure over one million pets through Petplan. We also provide legal exp... Know more