Cyber Psychologist Jobs (NOW HIRING)

The Role

Canopius is a marketleading cyber insurer with an inhouse Cyber Incident Management Team that supports clients during highly stressful and timecritical situations. Our role is to bring clarity, coordination, and reassurance when a cyber incident occurs.

As a Cyber Incident Manager, you will be the first point of contact for clients experiencing a cyber event, such as business email compromise, ransom demands, social engineering losses, or data incidents. Your focus will be on listening, assessing the situation, and guiding the client through the next steps, rather than carrying out technical investigations yourself.

You will triage incidents, coordinate specialist partners (including forensics, legal, and communications advisors), and projectmanage the response through recovery. Clear, calm, and empathetic communication will be central to everything you do. Working in a global, followthesun team, you'll collaborate closely with Claims and contribute insights that help shape our wider cyber offering.

Responsibilities

• Lead and coordinate the incident lifecycle from notification to resolution
  • Be the first point of contact for policyholder incident notifications.
  • Rapidly triage, assess severity, and set the response plan and cadence.
  • Coordinate and engage vendors (IR firms, forensics, legal, PR, ransom advisors), ensuring rightsized support at the right time.
  • Maintain clear timelines, decisions, and next steps
• Deliver best in class customer serviceinclass customer service
  • Provide calm, empathetic guidance under pressure; translate technical issues into clear business impact and options.
  • Set and manage expectations on milestones (containment, restoration, notifications) and costs.
  • Conduct welcome/onboarding calls; explain how to notify, what to expect, and how the IR panel operates.
  • Capture and act on policyholder feedback to continuously improve service.
  • Hit internal SLAs (acknowledgement, triage, vendor mobilisation, comms cadence).
• Operate within a global, 24/7 team model
  • Participate in rota/on call coverage to ensure true follow the sun response.call coverage to ensure true followthesun response.
  • Perform structured handovers across regions; maintain accurate case notes and status.
•         Evolve the service offering
  • Contribute practical feedback to improve response playbooks and service workflows.
  • Recommend panel/vendor improvements and measure vendor SLAs and outcomes.
  • Support content development (guides, FAQs, tabletop scenarios).
• Collaborate with Claims, Underwriting and Insights & Analytics
  • Partner with the Claims team to ensure smooth coverage confirmation and claim handling.
  • Surface material facts, costs, and causation signals; ensure incident files are complete and timely.
  • Escalate complex matters promptly and appropriately.
  • Sit "at the coal face" of live incidents and distil timely, high quality insights (threat vectors, controls efficacy, vendor performance, and industry signals).quality insights (threat vectors, controls efficacy, vendor performance, 
  • Provide structured post incident summaries and trend themes for underwriters and leadership.incident summaries and trend themes for underwriters and leadership.
  • Ensure precise, consistent capture of incident metadata and outcomes 
  • Champion data quality standards; work with Analytics to refine taxonomies and dashboards.
  • Collaborate in delivery of incident preparedness sessions, tabletops, and executive simulations for insureds.deliver incident preparedness sessions, tabletops, and executive simulations for insureds.
  • Feed real world lessons learned into control uplift recommendations.world lessons learned into control uplift recommendations.

Skills and Experience

• Experience in incident management, claims, professional services, crisis response, or clientfacing roles in regulated or highpressure environments.

• Foundational understanding of common cyberattack methods

• Demonstrate ability to solve complex problems and make sound judgements quickly, especially when operating in high pressure or fast moving situations. 

• Excellent organizational habits with a focus on accuracy and thoroughness in all tasks.

• Clear and confident communication skills both written and verbal with the capability to explain technical issues in an accessible way for non-technical and technical audiences.

• High empathy, composure under pressure, and a service mindset.

• Strong customer service skills, clear communication, and the ability to lead others calmly under pressure.

Salary Range: $70,000 - 84,500

Our benefits
We offer all employees a comprehensive benefits package that focuses on their whole wellbeing. This includes hybrid working, a competitive base salary, non-contributory 401k, discretionary bonus, insurances including medical, dental and vision cover, and many other benefits to enhance financial, physical, social and psychological health.
About Canopius
Canopius is a global specialty lines (re)insurer. We are one of the leading insurers in the Lloyd's of London insurance market with offices in the UK, US, Singapore, Australia and Bermuda.  
At Canopius we foster a distinctive, positive culture which enables us to bring our whole selves to work to flourish as people, and build a business which delivers profitable, sustainable results.
Canopius operates a flexible, hybrid working model and is committed to providing an environment that challenges employees to be their best and where everyone's unique contributions are recognised, valued and respected.  
We are fully committed to equal employment opportunities for all applicants and providing employees with a work environment free of discrimination and harassment. All employment decisions are made regardless of age, sex, gender identity, ethnicity, disability, sexual orientation, socio-economic background, religion or beliefs, marital or caring status, or any other status protected by the laws or regulations in the locations where we operate.  We encourage and welcome applicants from all diverse backgrounds.
We make reasonable adjustments throughout the recruitment process and during employment. Please let us know if you require any information in an alternate format or any other reasonable adjustments.

• Experience in incident management, claims, professional services, crisis response, or clientfacing roles in regulated or highpressure environments.

• Foundational understanding of common cyberattack methods

• Demonstrate ability to solve complex problems and make sound judgements quickly, especially when operating in high pressure or fast moving situations. 

• Excellent organizational habits with a focus on accuracy and thoroughness in all tasks.

• Clear and confident communication skills both written and verbal with the capability to explain technical issues in an accessible way for non-technical and technical audiences.

• High empathy, composure under pressure, and a service mindset.

• Strong customer service skills, clear communication, and the ability to lead others calmly under pressure.

Salary Range: $70,000 - 84,500

• Lead and coordinate the incident lifecycle from notification to resolution
  • Be the first point of contact for policyholder incident notifications.
  • Rapidly triage, assess severity, and set the response plan and cadence.
  • Coordinate and engage vendors (IR firms, forensics, legal, PR, ransom advisors), ensuring rightsized support at the right time.
  • Maintain clear timelines, decisions, and next steps
• Deliver best in class customer serviceinclass customer service
  • Provide calm, empathetic guidance under pressure; translate technical issues into clear business impact and options.
  • Set and manage expectations on milestones (containment, restoration, notifications) and costs.
  • Conduct welcome/onboarding calls; explain how to notify, what to expect, and how the IR panel operates.
  • Capture and act on policyholder feedback to continuously improve service.
  • Hit internal SLAs (acknowledgement, triage, vendor mobilisation, comms cadence).
• Operate within a global, 24/7 team model
  • Participate in rota/on call coverage to ensure true follow the sun response.call coverage to ensure true followthesun response.
  • Perform structured handovers across regions; maintain accurate case notes and status.
•         Evolve the service offering
  • Contribute practical feedback to improve response playbooks and service workflows.
  • Recommend panel/vendor improvements and measure vendor SLAs and outcomes.
  • Support content development (guides, FAQs, tabletop scenarios).
• Collaborate with Claims, Underwriting and Insights & Analytics
  • Partner with the Claims team to ensure smooth coverage confirmation and claim handling.
  • Surface material facts, costs, and causation signals; ensure incident files are complete and timely.
  • Escalate complex matters promptly and appropriately.
  • Sit "at the coal face" of live incidents and distil timely, high quality insights (threat vectors, controls efficacy, vendor performance, and industry signals).quality insights (threat vectors, controls efficacy, vendor performance, 
  • Provide structured post incident summaries and trend themes for underwriters and leadership.incident summaries and trend themes for underwriters and leadership.
  • Ensure precise, consistent capture of incident metadata and outcomes 
  • Champion data quality standards; work with Analytics to refine taxonomies and dashboards.
  • Collaborate in delivery of incident preparedness sessions, tabletops, and executive simulations for insureds.deliver incident preparedness sessions, tabletops, and executive simulations for insureds.
  • Feed real world lessons learned into control uplift recommendations.world lessons learned into control uplift recommendations.