Program Manager – Cyber Resiliency Insurance/Risk

Uptime Institute is the Global Digital Infrastructure Authority. With over 4,300 awards issued in over 122 countries around the globe, and over 1,100 currently active projects in 80+ countries, Uptime has helped tens of thousands of companies optimize critical IT assets while managing costs, resources, and efficiency.

For over 30 years, the company has established industry-leading benchmarks for data center performance, resilience, sustainability, and efficiency, which provide customers assurance that their digital infrastructure can perform across a wide array of operating conditions at a level consistent with their individual business needs. Uptime’s Tier Standard is the IT industry’s most trusted and adopted global standard for the design, construction, and operation of data centers. Offerings include the organization’s Tier Standard and Certifications, Management & Operations reviews and assessments including SCIRA-FSI financial sector risk assessment, the Sustainability Assessment, and a broad range of additional risk management, performance, availability, and related offerings.

Uptime Education training programs have been successfully completed by over 100,000 data center professionals, such as the much-valued ATD (Accredited Tier Designer) and AOS (Accredited Operations Specialist). The Uptime Education curriculum has been expanded by the acquisition of CNet Training Ltd. in 2023.

Uptime Institute is headquartered in New York, NY, with offices in London, Sao Paulo, Dubai, Riyadh, Singapore, and full-time Uptime professionals based in over thirty-four countries around the world. For more information, please visit

Uptime Institute has unparalleled expertise in helping organizations plan, build, operate and

optimize world-class digital infrastructure. With over 4,000 projects completed in over 120

countries globally to date, Uptime Institute has paved new ground in the exploration and

implementation of programs that help organizations to advance the detection and mitigation of

ICT (Information and Communication Technology) operational risk.

Uptime Institute is seeking a dynamic and experienced PROGRAM MANAGER CYBER

RESILIENCY INSURANCE/RISK to join our innovative team. The successful candidate,

working in conjunction with the Uptime Institute & LEET Security technical and leadership

teams and the global ICT community will be responsible for the continued development of

Uptime Institute’s cybersecurity-focused services portfolio for the insurance sector.

• Developing short and long-term strategy for cyber security services for the insurance

sector including, understanding market requirements, developing new insurance

related products and roadmaps with actionable plans, leading cross-functional teams

both internally and externally, and championing the execution and rollout of initiatives

globally.

• Developing strategies and consulting services designed to help insurance clients

(brokers, consortiums, underwriters) clients insure and protect digital infrastructure

across Enterprise owned sites and third-party MSP, Cloud Services, SaaS and

Colocation suppliers.

• Continuously evolving Uptime Institute cyber resiliency/Cybersecurity services

roadmap for insurance sector & scope offering and engaging the insurance sector to

help develop innovative insurance products, to improve services offering against the

expanding cyber security norms and standards relevant to data centers.

• Identifying and managing the cybersecurity program development partners and

insurance advisory board in line with the company’s objective of engaging the global

insurance community on an ongoing basis to ensure insurance cybersecurity offering

maps to current and future market and regulatory requirements.

• Engage with market participant to understand the pricing of digital infrastructure risk

that will enable the development of white label and custom offerings for insurance

market participants

• Planning and monitoring program execution, project coordination and managing

project interdependencies, cross-project resource management, Identifying and

addressing problems and risks, program documentation, stakeholder

communications, negotiations, and problem-solving.

• Responsible for establishing, sales process, training of technical and sales teams,

product launch and ongoing marketing programs in partnership with relevant

functional areas.

Credentials and Experience

This is a Senior role (hands-on) aimed at improving our clients’ IT Estate's cyber security & cyber

resiliency posture across all compute venues. An understanding of infrastructure

engineering/application engineering expertise is essential. The candidate should also have a

working knowledge of cyber security and resiliency approaches and how this applies to insurance

sector as a basis for ‘pricing risk’ and processes for data centers and digital infrastructure that

are relevant to the insurance sector and that may have a material impact on pricing risks, policy

wording, and premium calculations.

The successful candidate will have exposure to developing and implementing cyber security

programs in global organizations, with robust knowledge of technology, architectures, and related

tools as well as a working knowledge of insurance product and policy development. Prior business

experience with digital infrastructure (data centers) & insurance sector with a specific focus on

cybersecurity is a must.

• The role holder will have detailed working knowledge of the European/Global

regulatory environment governing cybersecurity together with a high-level

understanding of ISO27001, NIST-SP800, NIS-2, IEC62443, EN50600 and other

common standards,

• CISSP, CISM and/or CISA certifications would be beneficial but equivalent

experience or demonstrable equivalent knowledge will also be accepted.

• Cybersecurity, Information Security leadership, Technology, Management, Risk

Management and Governance, Incident Response, Security Remediation, Security

Policy Creation, Third Party Risk Management, Attack Surface Management

Creation exposure and experience essential.

• The role holder will possess first-hand knowledge of the Enterprise’s typical digital

infrastructure estates and will have demonstrable experience creating

cybersecurity/cyber resiliency-related insurance products.

• The role holder will have experience in creating and maintaining the service

taxonomy for cybersecurity.

• The role-holder will have experience originating cybersecurity products concepts and

building business cases to secure funding for development initiatives.

• The role holder will have experience in establishing and managing the creation of

regulatory cyber security self-assessment and third-party assessments and

coordination of periodic assessments.

• The role holder will have experience in coordinating with internal compliance and IT

audit groups and with regulatory agencies.

• The role holder experience in developing policy wording for insurance products

would be regarded as a plus

Skills

• Strong technology and/or ICT experience obtained via a career in industry or another

cyber security services provider/consultancy.

• Knowledge of the latest infrastructure technology trends, and an appreciation of the

opportunities and risks they present.

• Demonstrated ability to build effective client relationships with multiple stakeholders

across IT, facilities, and compliance functions.

• Ability to think creatively, generate innovative ideas, question the status quo at our

clients’ operations and deliver effectively against challenging objectives

• Utilize analytical skills to identify and challenge perceived or actual conflicts between

operational resilience and sustainability initiatives.

• The ability to deliver bespoke and innovative approaches to make sure that our

strategic legacy programs continue to evolve, maintaining our reputation as the

leading expert on data center resiliency and reliability and the insurance sector

• Excellent oral and written communication skills

• Strong interpersonal and leadership skills

• Ability to work iteratively, delivering quickly and frequently to produce high-quality

documents and outputs which require little to no rework.

• Multilingual English as a first language with Arabic as a second

• Madrid or London Office/Remote