City of London, England, United KingdomPosted 3 days agoFull-time
Thinking of applying? Check your CV against this job first.
See your match score, your strongest skills for this role, and what's missing — before you spend time on an application.
Your real match score
Free CareerPilot account · Takes about 2 minutes
The Role
Canopius is looking for a confident, commercially minded cybersecurity
professional to join our Cyber Insights & Analytics team, part of the Cyber
Underwriting division.
This is a client-facing advisory role combining cybersecurity expertise, cyber
risk management and stakeholder engagement. Working closely with our global
Cyber Services team and cyber underwriters, you will help clients understand
their cyber exposures, strengthen their resilience and navigate an evolving
threat landscape.
You will play a key role in delivering proactive cybersecurity services to
policyholders, including cybersecurity tabletop exercises, security awareness
and training sessions, data-led cyber risk reports and tailored advisory
engagements. You will also work alongside underwriters, brokers and internal
stakeholders to translate technical information and threat intelligence into
practical, commercially relevant insights.
We are looking for someone with strong cybersecurity foundations who can
confidently lead client engagements, communicate complex topics to a range of
audiences and exercise sound professional judgement. Success in this role will
depend as much on your ability to build relationships, communicate effectively
and provide practical advice as on your technical knowledge.
You will deliver client engagements with a degree of autonomy, working closely
with the wider Cyber Insights & Analytics team to coordinate activities, share
expertise and contribute to the ongoing development of Canopius' proactive cyber
services offering.
--------------------------------------------------------------------------------
RESPONSIBILITIES
CYBERSECURITY ADVISORY AND SERVICE DELIVERY
• Lead the delivery of assigned cybersecurity advisory engagements for
policyholders, working independently where appropriate and collaborating with
the wider team on more complex engagements.
• Design and facilitate cyber incident tabletop exercises, helping clients
evaluate their response capabilities, identify weaknesses and improve their
preparedness.
• Deliver security awareness training, cyber risk briefings, workshops and
other client-facing educational services.
• Assess clients' cybersecurity risks and controls, providing proportionate,
practical recommendations to strengthen their security posture.
• Tailor advisory services and recommendations to clients' industries,
operational environments, organisational maturity and threat exposure.
• Translate cybersecurity findings into clear business risks, helping clients
understand and prioritise appropriate risk mitigation measures.
STAKEHOLDER ENGAGEMENT AND RELATIONSHIP MANAGEMENT
• Develop trusted relationships with policyholders, brokers, cyber underwriters
and other internal and external stakeholders.
• Act as a point of contact for clients and underwriters on assigned Cyber
Services activities, maintaining strong working relationships and
coordinating with the wider global team.
• Engage with clients to understand their needs, identify relevant
cybersecurity challenges and recommend appropriate advisory services.
• Confidently present technical information and recommendations to audiences
with varying levels of cybersecurity knowledge, including senior business
stakeholders.
• Support policyholder onboarding and ongoing engagement, promoting awareness
and effective use of Canopius' proactive cyber services.
THREAT INTELLIGENCE AND RISK INSIGHTS
• Apply cyber threat intelligence and industry research to advisory
engagements, ensuring recommendations reflect credible and relevant threats.
• Contribute to the wider team's production of threat intelligence data and
analysis, to then communicate relevant risk insights and practical
recommendations to clients and underwriters.
• Support the development and delivery of sector-specific threat intelligence
reports, cyber risk briefings, webinars and thought leadership.
• Communicate the implications of emerging threats and significant cyber
incidents, including relevant attack pathways, business impacts and
mitigating controls.
• Work with the Cyber Services Manager and wider team to ensure threat
intelligence and analytical outputs are effectively incorporated into client
services and stakeholder communications.
UNDERWRITING SUPPORT
• Work closely with cyber underwriters to provide technical cybersecurity
advice and support risk assessment activities.
• Communicate the significance of cybersecurity findings from different sources
in the context of an organisation's overall risk profile.
• Support underwriters in understanding emerging cybersecurity risks, security
control effectiveness and industry-specific threat exposures.
SERVICE DEVELOPMENT AND COLLABORATION
• Support the ongoing development and improvement of Canopius' proactive cyber
services offering, providing feedback and recommendations informed by client
engagements and market needs.
• Collaborate with the global Cyber Insights & Analytics team on shared
projects, client deliverables, reporting and service development initiatives.
• Contribute to client-facing content, presentations, webinars and other
materials that communicate Canopius' expertise and cyber risk insights.
QUALIFICATIONS
REQUIRED SKILLS AND EXPERIENCE
• At least 3 years’ experience in cybersecurity consulting, cyber risk
advisory, security governance, information security or a closely related
field, with a track record of independently delivering external
stakeholder-facing work.
• Strong understanding of cybersecurity fundamentals, including identity and
access management, endpoint and network security, vulnerability management,
incident response, backup and recovery, and business resilience.
• Good understanding of common cyberattack methods, how threats can affect
organisations and the security controls that help mitigate them.
• Experience leading client meetings, workshops, presentations or advisory
engagements, including communicating with senior stakeholders.
• Strong interpersonal, presentation and relationship-building skills, with the
confidence to engage technical and non-technical audiences.
• Ability to evaluate cybersecurity risks, identify material issues and provide
practical, proportionate recommendations.
• Sound analytical judgement, including the ability to critically interpret
technical information, cybersecurity data and threat intelligence.
• Commercial awareness and the ability to understand how cybersecurity risks
affect business operations, decision-making and organisational priorities.
• Excellent written communication skills, with experience producing clear,
structured reports, presentations or advisory materials.
• Strong organisational skills, with the ability to manage multiple
engagements, prioritise competing demands and work independently.
• Collaborative approach, with the ability to contribute effectively to a
geographically distributed team.
DESIRABLE SKILLS AND EXPERIENCE
• Experience designing and facilitating cyber incident tabletop exercises or
incident response workshops.
• Experience within cyber insurance, insurance risk engineering or an
insurer-facing cybersecurity advisory function.
• Familiarity with recognised cybersecurity frameworks, including NIST
Cybersecurity Framework, CIS Controls and ISO 27001.
• Experience interpreting cyber threat intelligence, analysing attack
techniques or contributing to threat and risk reporting.
• Experience delivering security awareness programmes, cyber risk briefings or
cybersecurity training.
• Experience working with organisations across varying levels of cybersecurity
maturity.
• Relevant certifications such as CompTIA Security +, ISC” SSCP, ISC2 CGRC, or
equivalent professional experience.
Our benefits
We offer all employees a comprehensive benefits package that focuses on their
whole wellbeing. This includes hybrid working, a competitive base salary,
non-contributory pension, discretionary bonus, insurances including health
(family) and dental cover, and many other benefits to enhance financial,
physical, social and psychological health.
About Canopius
Canopius is a global specialty lines (re)insurer. We are one of the leading
insurers in the Lloyd’s of London insurance market with offices in the UK, US,
Singapore, Australia and Bermuda.
At Canopius we foster a distinctive, positive culture which enables us to bring
our whole selves to work to flourish as people, and build a business which
delivers profitable, sustainable results.
Based in incredible new offices in the heart of the City of London, Canopius
operates a flexible, hybrid working model and is committed to providing an
environment that challenges employees to be their best and where everyone's
unique contributions are recognised, valued and respected.
We are fully committed to equal employment opportunities for all applicants and
providing employees with a work environment free of discrimination and
harassment. All employment decisions are made regardless of age, sex, gender
identity, ethnicity, disability, sexual orientation, socio-economic background,
religion or beliefs, marital or caring status, or any other status protected by
the laws or regulations in the locations where we operate. We encourage and
welcome applicants from all diverse backgrounds.
We make reasonable adjustments throughout the recruitment process and during
employment. Please let us know if you require any information in an alternate
format or any other reasonable adjustments.