Jobs at CFC

Analyze cyber incident data, telemetry, and external threat sources to identify threat actors, campaigns, trends, and emerging risks. Translate complex findings into actionable intelligence for clients, brokers, underwriters, and internal stakeholders through reports, alerts, workshops, presentations, and recurring intelligence products. Lead insight sessions and threat-modeling exercises while connecting technical activity to real-world business exposure.

Lead CFC’s North American events program across hosted, partner, and industry events. Manage the full event lifecycle, including concept development, objectives, budgets, communications, suppliers, venues, sponsorships, delivery, and performance measurement. Build broker relationships, strengthen brand awareness, and collaborate with global marketing teams across time zones. The role requires strong commercial judgment, stakeholder management, project management, and familiarity with marketing and event technology platforms.

Analyze cyber incident data, telemetry, and external threat sources to identify threat patterns, actors, campaigns, and emerging risks. Translate findings into actionable intelligence for clients, brokers, underwriters, and internal stakeholders through reports, alerts, workshops, presentations, and recurring intelligence products. Lead insight sessions and threat-modeling exercises while contributing to thought leadership and analytical priorities.

Design, build, and operate production AI agents for automated underwriting decisions. Responsibilities include agent orchestration, durable workflows, APIs, tool integrations, guardrails, human-in-the-loop controls, observability, data modeling, cloud infrastructure, testing, and troubleshooting. The role also involves architectural decisions, Terraform-managed infrastructure, collaboration with machine learning and business teams, code reviews, mentoring, and improving the reliability, auditability, and maintainability of agentic systems.

Owns CFC’s end-to-end complaints function, including investigations, resolutions, regulatory reporting, operating model design, root cause analysis, and continuous improvement. Leads and develops a small complaints team, manages complex cases, builds reporting and feedback loops, and partners with Claims and other stakeholders to improve customer outcomes. Requires Lloyd’s market experience, insurance lifecycle and claims knowledge, analytical ability, stakeholder management, and prior leadership experience.

Lead complex digital forensics and incident response investigations across host, network, application, and cloud environments. Analyze threat actors, malware, attack techniques, and data exposure; produce forensic reports and timelines; guide clients through containment and recovery; and provide technical recommendations. Lead investigation teams, mentor junior investigators, collaborate with legal and business stakeholders, and deliver proactive services including tabletop exercises, workshops, and client training.

Provides onsite, walk-up, and remote IT support for CFC Australia and Global Security Services. Responsibilities include incident resolution, employee onboarding and offboarding, account administration, device deployment, Microsoft 365 and Entra ID administration, endpoint troubleshooting, networking, VPNs, meeting room technology, asset management, documentation, and support for technology projects and service improvements.

Operate and improve Microsoft Azure and hybrid infrastructure across compute, storage, networking, monitoring, identity, backup, and disaster recovery. Own infrastructure incidents, troubleshoot complex issues, deliver changes and patching, monitor performance and security, and implement sustainable operational improvements. Partner with technology, security, and engineering teams to automate, standardize, document, and secure infrastructure services. Provide occasional desktop support to the Austin team.

Coordinates cyber incidents from triage through resolution, serving as the central contact for clients, technical teams, executives, insurers, and legal counsel. Leads incident calls, manages action plans and timelines, translates technical information into business-focused updates, maintains documentation, and supports lessons learned. The role emphasizes stakeholder management, communication, project coordination, organization, decision-making, and customer experience rather than hands-on technical cybersecurity.

Coordinates cyber incidents from triage through resolution, serving as the central contact for clients, technical teams, insurers, legal counsel, executives, and other stakeholders. Manages incident calls, action plans, timelines, communications, documentation, risks, and lessons learned. The role emphasizes project coordination, stakeholder management, decision-making, organization, and translating technical information into clear business communications rather than hands-on cybersecurity.

Supports US insurance and claims-adjusting licence maintenance across all 50 states, including regulatory filings, licence tracking, broker onboarding, product filings, audits, marketing reviews, risk monitoring, regulatory communications, compliance controls, and sanctions investigations. The role requires insurance regulatory or compliance experience, strong organization, effective stakeholder communication, and the ability to manage detailed, time-sensitive work independently.

Lead CFC’s insurance reserving function across specialty lines, overseeing quarterly reserve reviews, reserving policy, governance, controls, and performance reporting. Provide portfolio analysis, claims trend insights, uncertainty assessments, and commercial recommendations to senior stakeholders, underwriters, claims, finance, capacity providers, reinsurers, auditors, and actuaries. Manage a high-performing reserving team while supporting pricing adequacy, risk appetite, profitability, and strategic portfolio optimization.

Lead the development and oversight of CFC’s Group financial crime framework within the second-line Compliance function. Advise stakeholders, support the MLRO, oversee sanctions screening and complex investigations, assess financial crime risks, maintain policies and controls, monitor regulatory developments, improve reporting and risk metrics, deliver training, and coach junior colleagues. The role requires strong UK insurance compliance experience, international sanctions expertise, and stakeholder management skills.

Owns key areas of group external financial reporting, including statutory accounts, reporting schedules, audit coordination, technical accounting papers, reconciliations, controls, and process improvements. The role ensures compliance with accounting standards and regulatory requirements while collaborating with finance teams and external auditors. This is a 12-month fixed-term position requiring a qualified accountant with strong technical accounting and statutory reporting experience.

Owns the underwriting data control environment, including governance frameworks, quality standards, reporting controls, health checks, master data management, data lineage, and exception reporting. Partners with Data, Operations, Underwriting, and reporting teams to ensure information is accurate, complete, reliable, and trusted. Supports transformation initiatives, validates month-end and quarter-end reporting, improves operational processes, and builds a scalable quality assurance and controls capability.

Designs and operates data-protection controls across systems, products, endpoints, email, and cloud stores. Responsibilities include data discovery and classification, loss prevention, encryption, masking, secure disposal, privacy automation, threat modeling, incident investigation, digital evidence handling, and security metrics. The role serves as a technical authority, leading cross-functional privacy and security reviews and translating risks into reusable engineering controls, standards, guardrails, and policy automation.

Leads hands-on security engineering across detection and response, identity and access, data protection, application and cloud security, threat modeling, incident response, control assurance, and security automation. Diagnoses complex vulnerabilities and control gaps, implements preventative measures, improves security standards and workflows, leads incident exercises, and coaches colleagues. Partners with technical and business stakeholders to deliver pragmatic, risk-informed security and privacy solutions in a regulated environment.

Own and improve group budgeting, rolling forecasts, long-term planning, reporting, and scenario modeling across the P&L, balance sheet, and cash flow. Deliver insights to executives, the Board, and investors while enhancing FP&A through AI, automation, workflow redesign, and Pigment. The role also requires strategic partnering, executive influence, financial analysis, and development of a high-performing team.

As an Actuarial Analyst, you'll perform quantitative analysis, support pricing tool development, and produce reporting to inform business decisions.

Lead security engineering across enterprise networks, devices, cloud systems, identity, and access environments. Design reusable security architectures, automated governance controls, authentication and authorization models, privileged access controls, secrets management, and policy-as-code. Diagnose and remediate security weaknesses, lead threat modeling, implement scalable controls for human and non-human identities including AI agents, and advise technology teams on complex security architecture decisions.