Skip to content

Open nowPosted 2 days ago

IT Security & Compliance Manager

msamlin54 open roles

Where
Rotterdam (WTC)
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowIT Security & Compliance Managermsamlin · Rotterdam (WTC)
  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on msamlin's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

13.3% of postings close within 7 days. Measured by our own scanner across the market. msamlin postings stay open a median of 10 days.

Share of postings closed within
  1. 2.1%1 day
  2. 4.6%3 days
  3. 13.3%7 days
  4. 21.3%14 days
  5. 35.7%30 days
  6. 59.1%60 days
This job: posted 2 days ago

msamlin median: 10 days open

The posting

About MSIG Specialty Marine

MSIG Specialty Marine is a leading Managing General Agent (MGA) delivering tailored marine insurance solutions to clients across the globe. By combining multiple carrier options with A-rated capital strength, we provide flexible and innovative insurance solutions in a complex and rapidly evolving market.

With approximately 200 specialist professionals across Europe, we bring together one of the industry’s most experienced teams of underwriters, claims specialists, and risk advisors. Our expertise spans eight core marine insurance product lines, supported by deep technical knowledge, market insight, and a strong client-first mindset.

Our ambition is simple: to be the world-class partner for marine insurance, combining technical excellence with exceptional service. From innovative risk solutions to trusted claims handling, we help our clients navigate uncertainty with confidence.

The Opportunity

We are seeking a Security Officer to lead security governance, risk, compliance, and assurance across MSIG Specialty Marine. This is a high-impact, organisation-wide role that will shape the security posture of the business while ensuring alignment with the security strategy of our global parent organisation.

Acting as the primary interface with the Group CISO, you will ensure global security standards are effectively adopted locally while maintaining independent governance oversight.

Reporting directly to the Chief Financial Officer (CFO), you will own the security control framework and provide challenge, guidance, and assurance across security activities delivered by:

  • Security Analysts
  • Internal IT teams (Architecture, Engineering, Platform & Service Management)
  • External security partners

You will play a critical role in ensuring that security is embedded by design, risks are proactively managed, and controls remain effective, auditable, and continuously improving.

This role offers the opportunity to work closely with senior leadership and technical teams, shaping security strategy in a growing and evolving international business.

Key Responsibilities

Security Governance & Strategy

  • Lead the development and maintenance of the organisation’s security governance framework.
  • Translate and implement global CISO policies within the MSIG Specialty Marine environment.
  • Define local security policies, standards, and control expectations.
  • Establish effective governance forums and decision-making processes.
  • Ensure accurate reporting of security posture to Head Office.

Risk, Compliance & Assurance

  • Lead the information security risk management framework across the organisation.
  • Ensure compliance with group standards, internal policies, and regulatory requirements.
  • Support internal and external security audits and manage evidence submissions.
  • Maintain a robust assurance programme to monitor control effectiveness.

Security Operations Oversight

  • Provide governance oversight of security operations delivered by internal teams and external SOC providers.
  • Ensure effective threat detection, monitoring, and incident response capabilities.
  • Oversee security incident management, escalation, and root cause analysis.
  • Govern vulnerability management and ensure risk-based remediation.

Security Architecture & Technology Governance

  • Ensure security-by-design principles are embedded across technology solutions.
  • Participate in architecture and design governance forums.
  • Review proposed technology solutions and ensure alignment with security standards.
  • Contribute to security reference architecture development.

Cloud, Identity & Endpoint Security

  • Define governance standards for cloud platforms, Microsoft 365, identity services, and endpoint security.
  • Ensure strong configuration baselines, identity controls, and data protection measures.
  • Oversee cloud security governance including privileged access, monitoring, and network protections.
  • Work closely with the Data Protection Officer to support privacy governance.

Operational Resilience & Third-Party Security

  • Define security requirements for business continuity, disaster recovery, and backup strategies.
  • Ensure resilience plans and testing programmes are effective.
  • Lead third-party security risk assessments and vendor onboarding reviews.
  • Ensure security requirements are embedded within procurement processes.

Secure Software Development Governance

  • Define and oversee the Secure Software Development Lifecycle (SSDLC).
  • Ensure security controls are integrated across development pipelines.
  • Govern application security practices including code scanning and vulnerability management.
  • Support DevSecOps practices across development teams.

What We’re Looking For

We are looking for a strategic security leader who combines strong governance expertise with the ability to influence senior stakeholders.

You will likely bring:

  • Extensive experience in information security governance, risk, and compliance
  • Experience operating within a three lines of defence model
  • A strong track record engaging senior leadership, auditors, and risk committees
  • Experience overseeing security operations and incident governance
  • Knowledge of secure software development lifecycle practices
  • The ability to translate technical risk into clear business language

Experience & Qualifications

  • Senior security governance experience in regulated industries (insurance, financial services, or similar)
  • Strong understanding of frameworks such as ISO 27001, NIST CSF, DORA, and CIS Controls
  • Experience with cloud security (Azure), identity governance, and Zero Trust architecture
  • Proven experience supporting regulatory compliance and audit programmes
  • Bachelor's degree in Information Security, Cybersecurity, Computer Science, or related discipline

Desirable certifications include:

  • CISSP
  • CISM
  • CRISC
  • ISO 27001 Lead Auditor / Implementer

What We Offer

At MSIG Specialty Marine, we believe in supporting both the professional growth and well-being of our people.

Our benefits include:

  • 30 days annual leave (based on a 40-hour work week)
  • 13th-month salary bonus
  • Bike lease scheme for sustainable commuting
  • 50% contribution to additional health insurance
  • Contribution to sports and wellness memberships
  • A modern office environment in central Rotterdam
  • A collaborative and supportive team culture

Why Join MSIG Specialty Marine?

This is an opportunity to take on a strategic security leadership role within a growing international marine insurance business.

You will help shape the organisation’s security governance, resilience, and risk management capability, working closely with both senior leadership and technical teams to ensure security remains a key enabler of the business. If you’re looking for a role where you can influence strategy, strengthen security frameworks, and make a real organisational impact, we would love to hear from you.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against msamlin's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.
  3. We apply on msamlin's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.
  4. Every reply, sorted

    msamlin's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.
  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.