Jobs at CFC

Analyze cyber incident data, telemetry, and external threat sources to identify threat actors, campaigns, trends, and emerging risks. Translate complex findings into actionable intelligence for clients, brokers, underwriters, and internal stakeholders through reports, alerts, workshops, presentations, and recurring intelligence products. Lead insight sessions and threat-modeling exercises while connecting technical activity to real-world business exposure.

Analyze cyber incident data, telemetry, and external threat sources to identify threat patterns, actors, campaigns, and emerging risks. Translate findings into actionable intelligence for clients, brokers, underwriters, and internal stakeholders through reports, alerts, workshops, presentations, and recurring intelligence products. Lead insight sessions and threat-modeling exercises while contributing to thought leadership and analytical priorities.

Design, build, and operate production AI agents for automated underwriting decisions. Responsibilities include agent orchestration, durable workflows, APIs, tool integrations, guardrails, human-in-the-loop controls, observability, data modeling, cloud infrastructure, testing, and troubleshooting. The role also involves architectural decisions, Terraform-managed infrastructure, collaboration with machine learning and business teams, code reviews, mentoring, and improving the reliability, auditability, and maintainability of agentic systems.

Owns CFC’s end-to-end complaints function, including investigations, resolutions, regulatory reporting, operating model design, root cause analysis, and continuous improvement. Leads and develops a small complaints team, manages complex cases, builds reporting and feedback loops, and partners with Claims and other stakeholders to improve customer outcomes. Requires Lloyd’s market experience, insurance lifecycle and claims knowledge, analytical ability, stakeholder management, and prior leadership experience.

Lead complex digital forensics and incident response investigations across host, network, application, and cloud environments. Analyze threat actors, malware, attack techniques, and data exposure; produce forensic reports and timelines; guide clients through containment and recovery; and provide technical recommendations. Lead investigation teams, mentor junior investigators, collaborate with legal and business stakeholders, and deliver proactive services including tabletop exercises, workshops, and client training.

Coordinates cyber incidents from triage through resolution, serving as the central contact for clients, technical teams, executives, insurers, and legal counsel. Leads incident calls, manages action plans and timelines, translates technical information into business-focused updates, maintains documentation, and supports lessons learned. The role emphasizes stakeholder management, communication, project coordination, organization, decision-making, and customer experience rather than hands-on technical cybersecurity.

Coordinates cyber incidents from triage through resolution, serving as the central contact for clients, technical teams, insurers, legal counsel, executives, and other stakeholders. Manages incident calls, action plans, timelines, communications, documentation, risks, and lessons learned. The role emphasizes project coordination, stakeholder management, decision-making, organization, and translating technical information into clear business communications rather than hands-on cybersecurity.

Lead CFC’s insurance reserving function across specialty lines, overseeing quarterly reserve reviews, reserving policy, governance, controls, and performance reporting. Provide portfolio analysis, claims trend insights, uncertainty assessments, and commercial recommendations to senior stakeholders, underwriters, claims, finance, capacity providers, reinsurers, auditors, and actuaries. Manage a high-performing reserving team while supporting pricing adequacy, risk appetite, profitability, and strategic portfolio optimization.

Lead the development and oversight of CFC’s Group financial crime framework within the second-line Compliance function. Advise stakeholders, support the MLRO, oversee sanctions screening and complex investigations, assess financial crime risks, maintain policies and controls, monitor regulatory developments, improve reporting and risk metrics, deliver training, and coach junior colleagues. The role requires strong UK insurance compliance experience, international sanctions expertise, and stakeholder management skills.

Owns key areas of group external financial reporting, including statutory accounts, reporting schedules, audit coordination, technical accounting papers, reconciliations, controls, and process improvements. The role ensures compliance with accounting standards and regulatory requirements while collaborating with finance teams and external auditors. This is a 12-month fixed-term position requiring a qualified accountant with strong technical accounting and statutory reporting experience.

Owns the underwriting data control environment, including governance frameworks, quality standards, reporting controls, health checks, master data management, data lineage, and exception reporting. Partners with Data, Operations, Underwriting, and reporting teams to ensure information is accurate, complete, reliable, and trusted. Supports transformation initiatives, validates month-end and quarter-end reporting, improves operational processes, and builds a scalable quality assurance and controls capability.

Designs and operates data-protection controls across systems, products, endpoints, email, and cloud stores. Responsibilities include data discovery and classification, loss prevention, encryption, masking, secure disposal, privacy automation, threat modeling, incident investigation, digital evidence handling, and security metrics. The role serves as a technical authority, leading cross-functional privacy and security reviews and translating risks into reusable engineering controls, standards, guardrails, and policy automation.

Leads hands-on security engineering across detection and response, identity and access, data protection, application and cloud security, threat modeling, incident response, control assurance, and security automation. Diagnoses complex vulnerabilities and control gaps, implements preventative measures, improves security standards and workflows, leads incident exercises, and coaches colleagues. Partners with technical and business stakeholders to deliver pragmatic, risk-informed security and privacy solutions in a regulated environment.

Own and improve group budgeting, rolling forecasts, long-term planning, reporting, and scenario modeling across the P&L, balance sheet, and cash flow. Deliver insights to executives, the Board, and investors while enhancing FP&A through AI, automation, workflow redesign, and Pigment. The role also requires strategic partnering, executive influence, financial analysis, and development of a high-performing team.

As an Actuarial Analyst, you'll perform quantitative analysis, support pricing tool development, and produce reporting to inform business decisions.

Lead security engineering across enterprise networks, devices, cloud systems, identity, and access environments. Design reusable security architectures, automated governance controls, authentication and authorization models, privileged access controls, secrets management, and policy-as-code. Diagnose and remediate security weaknesses, lead threat modeling, implement scalable controls for human and non-human identities including AI agents, and advise technology teams on complex security architecture decisions.

Lead analysis and documentation of the finance systems landscape, gather requirements, define future-state finance systems blueprint, and drive process simplification, automation, integrations and reporting improvements. Support NetSuite, Procure-to-Pay, Concur, Databricks and analytics initiatives through testing, implementation, stakeholder engagement and benefits tracking.

Business Analyst supporting MI and Data Insights initiatives across a global insurance business. Responsibilities include gathering requirements, translating business needs into data and technology solutions, analyzing data, improving processes, supporting transformation and automation projects, coordinating testing and governance, and driving stakeholder adoption. The role partners with underwriting, claims, finance, actuarial, distribution, and technology teams to modernize reporting and improve operational performance.

Build and manage relationships with portfolio partners as their primary contact, coordinate partnership placements, and oversee strategic projects from planning through implementation. Contribute to RFPs, pitches, pricing, proposals, cyber education, training, and ongoing product support. The role collaborates with internal stakeholders and the Head of Portfolio Partnerships in a commercial cyber insurance environment.

Lead the strategy and hands-on delivery of product security across cloud platforms, applications, code, and CI/CD pipelines. Build and operate security tooling, secure software supply chains, develop policy-as-code controls, lead threat modeling, and create reusable secure-by-default patterns. Diagnose vulnerabilities, improve remediation, measure control effectiveness, and establish safeguards for AI-assisted and agentic engineering workflows. Serve as a principal technical authority while advising stakeholders and coaching engineering teams.