> Markdown version of [/jobs/ext/331929-information-security-risk-manager](https://www.wearedevelopers.com/jobs/ext/331929-information-security-risk-manager). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Information Security Risk Manager - **Company:** Münchener Rückversicherungs-Gesellschaft - **Location:** London, UK - **Contract:** Permanent contract - **Skills:** Cyber Security, Information Security Management, Information Technology, Cybercrime - **Published:** June 7, 2026 - **Apply:** https://uk.indeed.com/viewjob?jk=8519d5495cf2f679 ## About the Role Do you have experience in NIST standards?, * Experience in Information Security / Cyber Risk / IT Risk roles * Strong background in Information Security frameworks (e.g. ISO 27001, NIST) * Experience operating in a Second Line of Defence or advisory role * Proven ability to provide independent challenge and constructive escalation to senior management * Experience in complex, multi-entity or international organisations highly desirable * Deep expertise in cybersecurity and information security risks * Broad understanding of enterprise risk management frameworks * Knowledge of operational resilience and third-party risk * Strong influencing skills with the ability to challenge constructively * Ability to present confidently to senior committees and leadership teams * Degree in Information Security, IT, Computer Science or related field (or equivalent experience) * Insurance or financial services experience beneficial but not essential ## Description Munich Re is seeking a highly skilled Information Security Risk Manager (ISRM) to act as the Information Security Subject Matter Expert for a number of UK entities, spanning the UK Specialty Global Markets, Life Branch and Great Lakes operations. This is a specialist role within the Second Line of Defence teams across three entities, offering high visibility across the organisation. You will provide independent oversight, challenge, and expert guidance on Information Security and Cyber risk, working across multiple UK-regulated entities operating within a global Group structure, with dotted-line reporting into Munich Re's Group IRM function in Munich. You will play a critical role in ensuring robust risk management practices that align with Group standards, UK regulatory expectations, and evolving cyber threats, while influencing senior stakeholders and shaping risk decisions. Whilst the role will collaborate with stakeholders across the organisation on a daily basis, there is no direct line management within the remit of the role., Information Security Risk Oversight * Provide independent second line oversight on Information Security and Cyber risks across UK entities * Review and challenge first line (IT and business) controls, risk assessments, and remediation activities * Monitor risk exposure and ensure timely and effective closure of control gaps, * Drive the implementation and embedding of the Munich Re Group Information Security Management (ISM) framework * Ensure alignment with UK regulatory expectations (FCA, PRA, Lloyd's) and internal policies * Translate regulatory and Group requirements into actionable control frameworks, * Act as the ISO for UK entities, providing risk leadership on Information Security matters * Serve as a trusted advisor to senior stakeholders on cyber and information risk topics, * IT and cyber initiatives, e.g. gap analyses on new regulatory requirements * Business change programmes * Third-party relationships, e.g. critical IT related service providers - working closely with TRPM experts in the wider risk teams * Support entity-level risk identification, assessment, and treatment planning, * Support management of cyber and information security incidents, providing independent risk input * Contribute to business impact assessments and operational resilience activities from a cyber security perspective * Ensure effective management of outsourcing and supplier cyber risks Reporting & Stakeholder Engagement * Deliver clear, insightful reporting to feed to governance committees and senior management, including entity Exco and Board forums * Communicate risk exposures, trends, and key issues with clarity and impact * Build strong relationships across IT, Risk, Compliance and business teams What Success Looks Like * Effective oversight and reduction of Information Security risk exposure * Strong challenge and influence over first line risk practices * High-quality, decision-enabling reporting to senior stakeholders * Robust alignment with Group and UK regulatory expectations * Successful navigation of a complex, multi-entity international environment ## Related Videos - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Fighting the Next Wave of Cybercrime](https://www.wearedevelopers.com/videos/100331-fighting-the-next-wave-of-cybercrime) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Enabling intelligent logistics automation: home-grown Industrial IoT platform at Austrian Post](https://www.wearedevelopers.com/videos/2018-enabling-intelligent-logistics-automation-home-grown-industrial-iot-platform-at-austrian-post) - [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large) - [It's not easy being green](https://www.wearedevelopers.com/videos/558-it-s-not-easy-being-green) ## Related Articles - [Finding IT & Technology English-speaking Jobs in Germany ](https://www.wearedevelopers.com/magazine/446-finding-it-technology-english-speaking-jobs-in-germany) - [Best Companies to Work For in Germany: Top 25 Companies in 2023 ](https://www.wearedevelopers.com/magazine/33-best-companies-to-work-for-in-germany-top-25-companies-in-2023) - [IT Salaries in Germany](https://www.wearedevelopers.com/magazine/287-it-salaries-in-germany) - [Best Companies to Work For in Berlin: Top 14 Companies in 2023 ](https://www.wearedevelopers.com/magazine/188-best-companies-to-work-for-in-berlin-top-14-companies-in-2023) - [System change: restart as developer?](https://www.wearedevelopers.com/magazine/39-system-change-restart-as-developer) - [Starter Kit For Job Applications For Developers](https://www.wearedevelopers.com/magazine/7-starter-kit-for-job-applications-for-developers)