Security Engineering Manager

Location: London, UK

Job Title

Role Overview

As a Security Engineering Manager, you will play a critical role in executing security initiatives that protect our systems, data, and infrastructure. We’re looking for a seasoned generalist—someone who has touched most areas of cybersecurity and can adapt quickly to new challenges. You’ll work closely with IT, engineering, and risk teams to implement and maintain security controls, evaluate new designs, and drive continuous improvement across our security posture.

You will also lead the practical application of artificial intelligence (AI) to security use cases, working in a product delivery model where security capabilities are treated as products with clear owners, roadmaps, user outcomes and measurable value, delivered iteratively through agile, multi-disciplinary squads.

Role Responsibilities

Security Engineering & Consulting

• Lead and support the implementation of security projects
• Ability to review, maintain and configure security tooling throughout the organisation
• Evaluate and enhance existing security controls, policies, and procedures.
• Perform risk assessments and recommend mitigation strategies, whilst informing technology and business owners to communicate current Resilience and risk exposure.
• Provide Technical Security consultancy to projects
• Engage effectively with risk, legal, privacy, data governance and enterprise architecture
• Provide support and guidance through secure by design competencies (Attack mapping, threat modelling)
• Conduct vulnerability assessments and coordinate remediation efforts.
• Collaborate with DevOps and IT teams to integrate security into infrastructure and application design and development lifecycles.
• Support compliance efforts (e.g., SOC 2, ISO 27001, etc.) through documentation and control testing.
• Knowledge sharing with team members and promote a culture of security awareness

AI-Enabled Security Capabilities (Product Delivery Model)

Identify, prioritise and deliver artificial intelligence (AI) and machine learning use cases that measurably improve security outcomes – for example vulnerability prioritisation, control assurance and evidence gathering.

Own AI-enabled security capabilities as products rather than projects: define the problem statement and user need, maintain a prioritised backlog and roadmap, and deliver iteratively through discovery, proof of value, pilot and scaled adoption.

Apply security automation and orchestration, including large language model (LLM) and agent-based approaches, to reduce manual effort in security engineering workflows, with appropriate human oversight of automated decisions.

Work with data, platform and engineering teams to ensure the data quality, pipelines, integration and tooling needed to support AI-enabled security capabilities at scale.

Ensure AI use in security is safe, explainable and compliant – working with risk, privacy, data governance and compliance teams to meet internal AI governance standards and applicable regulatory expectations across our operating jurisdictions.

Advise on securing the organisation’s own AI adoption, including model and prompt security, data leakage, third-party AI services and AI-specific threats (for example prompt injection, model misuse and adversarial inputs).

Skills & Experience

• 7+ years of experience in cybersecurity roles, preferably in finance services or insurance sectors.
• Broad knowledge of security domains: network security, endpoint protection, Secure development lifecycle, identity and access management, cloud security (AWS/Azure), incident response, and governance.
• Hands-on experience with SIEM, EDR, vulnerability management tools, and cloud-native security services.
• Demonstrable experience applying artificial intelligence (AI), machine learning or large language models (LLMs) to security use cases, with evidence of delivered outcomes rather than experimentation alone.
• Experience working in a product delivery model – product ownership or capability ownership, backlog and roadmap management, agile delivery, iterative release and value measurement.
• Practical knowledge of security automation and orchestration, scripting or low-code integration, and working with application programming interfaces (APIs) and security data pipelines.
• Understanding of AI risk, governance and assurance concepts, including model limitations, bias, explainability, data protection and emerging AI regulation and standards (for example the EU AI Act and ISO/IEC 42001).
• Awareness of AI-specific threats and controls, such as prompt injection, data leakage through AI tooling, model and supply chain risk, and frameworks such as the OWASP Top 10 for LLM Applications and MITRE ATLAS.
• Familiarity with regulatory frameworks and industry standards (e.g., NIST, CIS, etc.).
• Strong analytical and problem-solving skills.
• Excellent communication and collaboration abilities.
• Prefer certifications such as GIAC, CISSP, etc.
• Prefer Bachelor’s degree in Information Technology or related discipline

Competencies and Behaviours

• Pragmatic approach – creative problem solving for mitigations and improvements to cater for a variety of technology and business needs
• Positive strategic thinking – Sharing insight and best practice approached to challenges.
• Variable communication style – Have the ability to communicate at to both technical and executive audiences.
• Growth mindset – Continuous investment in skills and knowledge.
• Product and outcome mindset – Starts from the user and the outcome, delivers in small increments, measures value and adapts quickly.
• Balanced innovator – Enthusiastic about new technology such as AI, while remaining objective about hype, limitations and risk.
• Positive collaborator – Approachable and supportive to solving challenges across multiple stakeholders and teams.

Working For Pacific Life Re

Every person in our global team is valued for the unique qualities they bring to our business and we seek to build their expertise and support their individual ambitions at every step. Of course, we take our work seriously and we know our team can operate under great pressure. We work hard and thrive on achievement, but we also know how to have fun and relax too. We regularly host a range of team building days to strengthen our team's connection with each other and reflect on their successes.

Providing employees with a healthy work-life balance is very important to our culture. We have a wide range of employee benefits and we host regular social activities and well being initiatives. We are also committed to supporting our employee's involvement in their communities, by actively fundraising, hosting charity events and overseeing volunteering opportunities.

Benefits (Only for Permanent and Fixed Term Employees)

Leave

• 25 days of annual leave with option to buy/sell more days
• Adoption and fertility leave
• Generous enhanced parental leave

Healthcare

• Comprehensive private insurance coverage for employee and dependents
• Group Life Insurance coverage of 9x basic annual salary and Group Income Protection up to 75% of basic annual salary
• Optical benefits

Savings & Retirement

15% combined employee/employer contributions

Wellness

• Subsidized gym membership
• Access to Employee Assistance Program
• Cycle to Work and Electric Car Salary Sacrifice Scheme
• Time off for volunteering
• Charitable matching of employee donations

You Can Be Who You Are

We are committed to a culture of diversity and inclusion that embraces the authenticity of all employees, partners and communities. We support all employees to thrive and achieve their fullest potential.

As part of our commitment to diversity and inclusion, we will provide reasonable adjustments during the recruitment process to ensure equal access to applicants with disabilities. Please contact us about your needs so that we can discuss these with you to make sure that suitable adjustments are made, where possible.

Pacific Life Re Values

Please click here to view our company values