Information Security Manager at Apollo

Your Role:

We are looking for a hands-on Information Security Manager to lead the development and delivery of our security strategy. You will be responsible for embedding best practice across Apollo, implementing recognised frameworks, and ensuring our information assets remain protected against evolving threats.

This is a pivotal opportunity to shape Apollo’s security posture within a growing and ambitious business, joining at an exciting time as we transform how technology and digital services are used in the insurance industry. You will be part of a collaborative and forward-thinking culture focused on innovation and inclusion, with a competitive salary, benefits, and clear career progression opportunities.

What You’ll Do

• Lead day-to-day security operations, including monitoring, incident response, vulnerability management, access control, and third-party supplier oversight
• Implement and maintain recognised frameworks (ISO 27001, NIST CSF, CIS Controls), ensuring compliance with GDPR, FCA and PRA requirements
• Develop and enforce policies, standards, and procedures aligned with both regulatory obligations and business priorities
• Act as the point of contact for incident management, overseeing escalation, investigation, and resolution
• Partner with underwriters, claims, operations, and IT to embed security considerations across business processes
• Promote a culture of awareness through staff training and engagement programmes
• Support internal and external audits, evidencing compliance with industry and regulatory standards
• Stay current with threat intelligence and market trends, proactively enhancing Apollo’s security posture

What We Are Looking For

• Proven experience in information security roles, ideally within regulated markets
• Strong technical knowledge of security tools, including SIEM, IDS/IPS, DLP, endpoint protection, and cloud security
• Experience implementing and managing frameworks such as ISO 27001 or NIST
• Knowledge of GDPR, FCA guidelines, and PRA requirements
• Excellent stakeholder management and communication skills, with the ability to influence at all levels
• Track record of designing and delivering security initiatives in complex, regulated environments
• Professional certifications such as CISSP, CISM, or ISO 27001 Lead Implementer/Auditor would be an advantage