Infrastructure & Network Security Specialist

Role Description

As the Infrastructure & Network Security Specialist you will be responsible for governing, planning and delivering the safeguarding of Allianz UK infrastructure by enforcing robust security policies, managing technical controls, and ensuring compliance with internal and external standards. Ideally you will bring a strong technical foundation in Infrastructure IT security, a keen understanding of risk management frameworks, and the ability to collaborate across teams to drive continuous improvement in our security posture.

You will own IT related activities within the information security framework and will work closely with information security, IT/IS risk functions and outsourced service providers to confirm that these aspects of the framework are fully implemented and can be evidenced as effective. Where remedial activities are required, you will ensure that appropriate risks are documented, with tracked remedial actions, to completion.

Location

This role is based in our Guildford office. This is a hybrid role with the expectation that you attend the office 2 days per week.

Salary Information

Pay: Circa £80,000 per year.

Pay is based on relevant experience, skills for the role, and location. Salary is only one part of our total reward package.

Key Accountabilities

As the Infrastructure & Network Security Specialist you will

• Accountable for all information security risks and controls owned by IT.
• Work in conjunction with Information Security, IT, business stakeholders and outsourced partners to ensure the effective management and continuous improvement of security risks across the IT environment.
• Report IT risk management status to senior stakeholders.
• Manage and oversee outsourced partners and their adherence to control frameworks.
• Collaborate with team members across cloud, infrastructure and workplace to build expertise within the team concerning security capabilities.
• Produce business cases when project investment is required to further long-term IT ambitions in elevating capabilities. Act as sponsor or key stakeholder for relevant project deliveries.
• Engage with projects during service acceptance to ensure that project deliveries do not introduce IT risk
• Ensure compliance to internal Allianz Policies, Standards and Functional Rules
• Ensure compliance to internal Audit controls
• Ensure compliance to regulatory and other external audits
• Have ownership and delivery of actions to address any audit or compliance findings

Technical Skills

Role Specific

• One or more of CISA, CISSP or CRISC
• Good working knowledge of NIST and COBIT frameworks
• Deep understanding of data centre/network and workplace architectures and operations both within the insurance industry and market generally
• Sound understanding of IT risk management processes and experience of leading mitigation and remediation activities
• Management of third parties – especially offshore
• Deep understanding of IT security management processes, practices and technology.
• Good understanding of security design, including cryptography, within infrastructure, application and workplace environments.

Generic

• Excellent business awareness and focus on customer service
• Adaptive and responsive to change
• Ability to build and manage relationships
• Ability to build partnerships across Allianz business units
• Ability to effectively work with virtual teams
• Results and delivery focused
• Ability to use planned and structured approaches
• Excellent communication skills; approachable; authoritative; diplomatic; demonstrates empathy
• Effective team-member, trainer and coach
• Responsible Artificial Intelligence usage

Experience

• Proven experience in IT including hands-on with security tooling, risk analysis, or governance roles within complex enterprise environments.
• Excellent understanding of communication protocols (e.g., TCP/IP, HTTP/S, SMTP), network architecture and security technologies.
• Hands-on experience with proxy servers, email gateways, firewalls, and routing devices.
• Familiarity with industry standards and frameworks such as ISO 27001, NIST, CIS Controls, and ITIL.
• Experience with automation tools and scripting languages (e.g., PowerShell, Python) for configuration and compliance checks.
• Knowledge of patch and vulnerability management tools and practices.
• Understanding of identity and access management (IAM) principles and technologies.
• Working closely with and influencing senior stakeholders across a large multi-national commercial organisation.
• Managing IT and application of information security principals in an outsourced service environment across infrastructure, networks and applications.
• Experience conducting risk assessments, especially from an information security and information technology perspective.
• Experience of creating and presenting executive summary reports.
• Excellent analytical and problem-solving skills.