Cyber Services Advisor

The Role

Canopius is looking for a confident, commercially minded cybersecurity professional to join our Cyber Insights & Analytics team, part of the Cyber Underwriting division.

This is a client-facing advisory role combining cybersecurity expertise, cyber risk management and stakeholder engagement. Working closely with our global Cyber Services team and cyber underwriters, you will help clients understand their cyber exposures, strengthen their resilience and navigate an evolving threat landscape.

You will play a key role in delivering proactive cybersecurity services to policyholders, including cybersecurity tabletop exercises, security awareness and training sessions, data-led cyber risk reports and tailored advisory engagements. You will also work alongside underwriters, brokers and internal stakeholders to translate technical information and threat intelligence into practical, commercially relevant insights.

We are looking for someone with strong cybersecurity foundations who can confidently lead client engagements, communicate complex topics to a range of audiences and exercise sound professional judgement. Success in this role will depend as much on your ability to build relationships, communicate effectively and provide practical advice as on your technical knowledge.

You will deliver client engagements with a degree of autonomy, working closely with the wider Cyber Insights & Analytics team to coordinate activities, share expertise and contribute to the ongoing development of Canopius' proactive cyber services offering.

Cybersecurity advisory and service delivery

Lead the delivery of assigned cybersecurity advisory engagements for policyholders, working independently where appropriate and collaborating with the wider team on more complex engagements.

Design and facilitate cyber incident tabletop exercises, helping clients evaluate their response capabilities, identify weaknesses and improve their preparedness.

Deliver security awareness training, cyber risk briefings, workshops and other client-facing educational services.

Assess clients' cybersecurity risks and controls, providing proportionate, practical recommendations to strengthen their security posture.

Tailor advisory services and recommendations to clients' industries, operational environments, organisational maturity and threat exposure.

Translate cybersecurity findings into clear business risks, helping clients understand and prioritise appropriate risk mitigation measures.

Stakeholder engagement and relationship management

Develop trusted relationships with policyholders, brokers, cyber underwriters and other internal and external stakeholders.

Act as a point of contact for clients and underwriters on assigned Cyber Services activities, maintaining strong working relationships and coordinating with the wider global team.

Engage with clients to understand their needs, identify relevant cybersecurity challenges and recommend appropriate advisory services.

Confidently present technical information and recommendations to audiences with varying levels of cybersecurity knowledge, including senior business stakeholders.

Support policyholder onboarding and ongoing engagement, promoting awareness and effective use of Canopius' proactive cyber services.

Threat intelligence and risk insights

Apply cyber threat intelligence and industry research to advisory engagements, ensuring recommendations reflect credible and relevant threats.

Contribute to the wider team's production of threat intelligence data and analysis, to then communicate relevant risk insights and practical recommendations to clients and underwriters.

Support the development and delivery of sector-specific threat intelligence reports, cyber risk briefings, webinars and thought leadership.

Communicate the implications of emerging threats and significant cyber incidents, including relevant attack pathways, business impacts and mitigating controls.

Work with the Cyber Services Manager and wider team to ensure threat intelligence and analytical outputs are effectively incorporated into client services and stakeholder communications.

Underwriting support

Work closely with cyber underwriters to provide technical cybersecurity advice and support risk assessment activities.

Communicate the significance of cybersecurity findings from different sources in the context of an organisation's overall risk profile.

Support underwriters in understanding emerging cybersecurity risks, security control effectiveness and industry-specific threat exposures.

Service development and collaboration

Support the ongoing development and improvement of Canopius' proactive cyber services offering, providing feedback and recommendations informed by client engagements and market needs.

Collaborate with the global Cyber Insights & Analytics team on shared projects, client deliverables, reporting and service development initiatives.

Contribute to client-facing content, presentations, webinars and other materials that communicate Canopius' expertise and cyber risk insights.

Required Skills and Experience

At least 3 years’ experience in cybersecurity consulting, cyber risk advisory, security governance, information security or a closely related field, with a track record of independently delivering external stakeholder-facing work.

Strong understanding of cybersecurity fundamentals, including identity and access management, endpoint and network security, vulnerability management, incident response, backup and recovery, and business resilience.

Good understanding of common cyberattack methods, how threats can affect organisations and the security controls that help mitigate them.

Experience leading client meetings, workshops, presentations or advisory engagements, including communicating with senior stakeholders.

Strong interpersonal, presentation and relationship-building skills, with the confidence to engage technical and non-technical audiences.

Ability to evaluate cybersecurity risks, identify material issues and provide practical, proportionate recommendations.

Sound analytical judgement, including the ability to critically interpret technical information, cybersecurity data and threat intelligence.

Commercial awareness and the ability to understand how cybersecurity risks affect business operations, decision-making and organisational priorities.

Excellent written communication skills, with experience producing clear, structured reports, presentations or advisory materials.

Strong organisational skills, with the ability to manage multiple engagements, prioritise competing demands and work independently.

Collaborative approach, with the ability to contribute effectively to a geographically distributed team.

Desirable Skills and Experience

Experience designing and facilitating cyber incident tabletop exercises or incident response workshops.

Experience within cyber insurance, insurance risk engineering or an insurer-facing cybersecurity advisory function.

Familiarity with recognised cybersecurity frameworks, including NIST Cybersecurity Framework, CIS Controls and ISO 27001.

Experience interpreting cyber threat intelligence, analysing attack techniques or contributing to threat and risk reporting.

Experience delivering security awareness programmes, cyber risk briefings or cybersecurity training.

Experience working with organisations across varying levels of cybersecurity maturity.

Relevant certifications such as CompTIA Security +, ISC” SSCP, ISC2 CGRC, or equivalent professional experience.