Cyber Risk Analyst - Remote

501 CSAA Insurance Services, Inc.; Colorado; Remote; USD 90,000 - 120,000; Full time

Job summary

A leading company in the insurance sector is seeking a Cyber Risk Analyst to manage IT risk and support cybersecurity initiatives. The role involves conducting assessments, advising on risk exposure, and developing risk management methodologies. This remote position is ideal for experienced professionals committed to effective communication and relationship building across teams.

Benefits

Performance bonus

401(k) with company match

Employee resource groups

Volunteering opportunities

Qualifications

• 8+ years’ relevant work experience.
• Bachelor's or equivalent experience in related field.
• Experience managing projects involving multiple stakeholders.

Responsibilities

• Support IT risk management and communicate security posture.
• Conduct risk assessments and compliance reviews.
• Develop methodologies for risk management decisions.

Skills

Effective communication

Project management

Relationship building

Education

Bachelor's degree in Computer Science

Master’s degree in STEM

Job description

CSAA Insurance Group (CSAA IG), a AAA insurer, is one of the top personal lines property and casualty insurance groups in the U.S. Our employees proudly live our core beliefs and fulfill our enduring purpose to help members prevent, prepare for, and recover from life's uncertainties. We are committed to progress over perfection, recognizing every day as an opportunity to be innovative and adaptable. At CSAA IG, we hire good people for a brighter tomorrow. We are actively hiring for a Cyber Risk Analyst - Remote! Join us and support CSAA IG in achieving our goals.

Your Role :

Supports the management of Information Technology risk for both new build and existing infrastructure and environments. Provides subject matter expertise to leadership, IT teams, and the business on cybersecurity matters. Works with the security team, including vulnerability management, logging and monitoring, and threat intelligence teams to understand threats and the CSAA IT environment to communicate CSAA’s security posture.

Your Work :

Performs complex work supporting implementation of IT risk management processes and cyber risk quantification (CRQ). Works under general supervision on projects of moderate to high scope and complexity, advising the business on technology security risk exposure and mitigation measures.

Security Risk Management :

• Conduct risk assessments, analyze the effectiveness of CSAA IG's IT compliance activities, and report findings with recommendations to leadership.
• Perform compliance reviews to ensure applications, platforms, and cloud environments adhere to policies and procedures.
• Support business projects using Agile methodologies to identify security requirements, coordinating with IT and business units.
• Track and manage security findings and exceptions in the GRC platform.
• Develop and maintain security dashboards to inform risk management and leadership.
• Use FAIR methodology to analyze technology risk scenarios, modeling impact and likelihood of cyber events.
• Utilize the MITRE ATT&CK framework to develop threat models for cyber risk quantification.
• Develop methodologies and models to support risk management decisions.

Third Party Risk Management :

• Review third-party/vendor risk assessments and escalate significant issues.
• Track and manage third-party risk assessments within designated projects.

Required Experience, Education, and Skills :

• 8+ years’ relevant work experience.
• Bachelor's degree in Computer Science, Information Systems, or related field, or equivalent experience.
• Strong ability to build and maintain relationships across diverse teams.
• Effective communication skills for technical and non-technical audiences.
• Experience managing projects involving multiple stakeholders.

What Would Make Us Excited About You :

• Active participation in company culture activities (e.g., employee resource groups, volunteering).
• Living our cultural norms, including engaging in team onboarding and relationship building.
• Willingness to travel as needed.
• Extra effort to meet business needs.
• Preferred: 8+ years of system documentation and/or technical writing experience.
• Preferred: Master’s degree in STEM or equivalent experience.

At CSAA IG, we’re devoted to protecting our customers, employees, communities, and the planet. We are on a climate journey to do better for our people, our business, and our world. We believe in building a community of service rooted in inclusion and belonging, and we are committed to innovation and purpose-driven work.

Recognition : We offer a total compensation package, performance bonus, 401(k) with company match, and more!