Global Head of Threat Intelligence

Social network you want to login/join with:

Global Head of Threat Intelligence, London

Client:

WTW

Location:

London, United Kingdom

Job Category:

Other

-

EU work permit required:

Yes

Job Reference:

bb15ce3ae7d7

Job Views:

4

Posted:

12.08.2025

Expiry Date:

26.09.2025

Job Description:

We are seeking passionate people to grow the Cyber Security team within WTW and provide an excellent service and trusted expertise to all parts of our business. As part of a business-wide transformation, we have an exciting opening for a new role of Global Head of Threat Intelligence.

As part of the Cyber Defence and Security Operations department, you will be a senior leader managing the Threat Intelligence service ensuring WTW can prevent and better understand cyber-attacks against our environment.

You will need to have a good technical aptitude, excellent communication skills to technical and non-technical audiences, and a solid business acumen to deal with other senior stakeholders across the business.

This role would suit those with extensive experience in TI for global enterprise organizations or have led MSSP services and are used to working in a high-pressure environment and managing geographically dispersed teams across different time zones.

The Role

As the Global Head of Incident Response, your primary responsibilities will be:

• Manage and develop a global team of Cyber Threat Intelligence analysts, providing expert assistance during a cyber incident and for routine investigations escalated by the SOC.
• Manage a team of analysts spread across the globe and recruit new team members as required.
• Develop working processes linking Threat Intelligence to Threat Hunting to enhance our Threat-led approach to cybersecurity.
• Develop our internal and third-party threat intelligence capabilities, focusing on sectors and geographies WTW operates in, to ensure relevant stakeholders understand and become accountable for the threats we face.
• Maintain a Threat Intelligence gathering and briefing system within WTW to ensure technology teams are aware of threats and become accountable for addressing them within the technologies they manage.
• Integrate Threat Intelligence into the vulnerability management program to ensure new vulnerabilities are remediated.
• Provide senior stakeholder and board-level briefings.
• Overall, bring Threat Intelligence to the top of all processes to ensure WTW is a threat-led organization.

Your team's key responsibilities:

• Monitoring dark web and other locations for information relevant to WTW.
• Monitoring our key clients and suppliers for issues that may impact WTW.
• Staying up-to-date with emerging and known attacks, TTPs, and KEVs, and proactively ensuring WTW can detect cyber-attacks utilizing them.
• Other relevant tasks as designated by the Global Director of Cyber Defence.

Overarching Business Tasks

To ensure all parts of WTW are monitored by our Threat Services with robust processes in place to disseminate information and perform threat-related investigations to prevent cyber incidents or reduce their impact.

Communications and Relationships

Internal:

• Close working relationships will be needed with other team members around the globe.
• You will need to work with technical contacts throughout the business and with multiple third parties.
• You will need to brief the security leadership team, board members, and other internal business units on threat-related criteria.