At Munich Re Specialty – Global Markets (MRS-GM), it is our ambition to become the leading Primary Specialty Insurance provider, underpinned by an effective and adaptable strategy, superior products and industry leaders working in a supportive environment to achieve this.     
 
At the heart of our success is a strong culture where people are encouraged to be present, bold and curious, allowing them to achieve their individual goals.

Information Security Risk Manager

Munich Re is seeking a highly skilled Information Security Risk Manager (ISRM) to act as the Information Security Subject Matter Expert for a number of UK entities, spanning the UK Specialty Global Markets, Life Branch and Great Lakes operations.

This is a specialist role within the Second Line of Defence teams across three entities, offering high visibility across the organisation. You will provide independent oversight, challenge, and expert guidance on Information Security and Cyber risk, working across multiple UK-regulated entities operating within a global Group structure, with dotted-line reporting into Munich Re’s Group IRM function in Munich.

You will play a critical role in ensuring robust risk management practices that align with Group standards, UK regulatory expectations, and evolving cyber threats, while influencing senior stakeholders and shaping risk decisions.

Whilst the role will collaborate with stakeholders across the organisation on a daily basis, there is no direct line management within the remit of the role.

Key Responsibilities

Information Security Risk Oversight

• Provide independent second line oversight on Information Security and Cyber risks across UK entities
• Review and challenge first line (IT and business) controls, risk assessments, and remediation activities
• Monitor risk exposure and ensure timely and effective closure of control gaps

Framework & Governance

• Drive the implementation and embedding of the Munich Re Group Information Security Management (ISM) framework
• Ensure alignment with UK regulatory expectations (FCA, PRA, Lloyd’s) and internal policies
• Translate regulatory and Group requirements into actionabl