Cyber Risk Analyst - Remote

501 CSAA Insurance Services, Inc.; Town of Texas (WI); Remote; USD 80,000 - 110,000; Full time

Job summary

Join a forward-thinking company as a Cyber Risk Analyst, where you will play a crucial role in managing IT risk and enhancing cybersecurity measures. This innovative firm is dedicated to fostering a culture of inclusion and innovation, providing you with opportunities to collaborate across diverse teams. You will conduct risk assessments, develop methodologies for technology risk management, and utilize industry frameworks to quantify cyber risks. With a comprehensive compensation package and a commitment to community and environmental protection, this role is perfect for someone passionate about making a difference in the cybersecurity landscape.

Benefits

Performance Bonus

401(k) with Company Match

Comprehensive Compensation Package

Flexible Work Hours

Qualifications

• 8+ years of experience in IT risk management and cybersecurity.
• Strong communication skills for diverse audiences.
• Experience in managing projects with multiple stakeholders.

Responsibilities

• Conduct risk assessments and analyze IT compliance activities.
• Develop security dashboards and manage security findings.
• Support business projects to identify security requirements.

Skills

IT Risk Management

Cybersecurity Expertise

Risk Assessment

Agile Methodologies

Technical Communication

Education

Bachelor's in Computer Science

Master's in STEM

Tools

GRC Platform

FAIR Methodology

MITRE ATT&CK Framework

Job description

CSAA Insurance Group (CSAA IG), a AAA insurer, is one of the top personal lines property and casualty insurance groups in the U.S. Our employees proudly live our core beliefs and fulfill our enduring purpose to help members prevent, prepare for and recover from life's uncertainties. We are committed to progress over perfection, recognizing each day as an opportunity to be innovative and adaptable. At CSAA IG, we hire good people for a brighter tomorrow. We are actively hiring for a Cyber Risk Analyst - Remote! Join us and support CSAA IG in achieving our goals.

Your Role :

Supports the management of Information Technology risk for both new build and existing infrastructure and environments. Provides subject matter expertise to leadership, IT teams, and the business on cybersecurity matters. Collaborates with the security team, including vulnerability management, logging and monitoring, and threat intelligence teams to understand threats and the CSAA IT environment to communicate CSAA’s security posture.

Your work :

Performs complex work supporting the implementation of IT risk management processes and cyber risk quantification (CRQ). Works under general supervision on projects of moderate to high scope and complexity, advising the business on technology security risk exposure and measures to manage and mitigate risk.

Security Risk Management :

• Conduct risk assessments, analyze the effectiveness of CSAA IG's IT compliance activities, and report findings with recommendations to leadership.
• Perform compliance reviews to ensure applications, platforms, and cloud environments adhere to policies and procedures.
• Support business projects, often using Agile methodologies, to identify security requirements and concerns, coordinating with IT and business staff.
• Track and manage security findings and exceptions in the GRC platform.
• Develop and maintain security dashboards to inform security risk management and leadership of risk exposure.
• Use FAIR methodology to analyze technology risk scenarios, modeling impact and likelihood of cyber risk events.
• Utilize the MITRE ATT&CK framework to develop threat models for cyber risk quantification.
• Develop methodologies and models to support technology risk management decisions.

Third Party Risk Management :

• Review third-party/vendor risk assessments and escalate significant issues to leadership.
• Manage third-party risk assessments within designated project portfolios.

Required Experience, Education and Skills :

• 8+ years’ work experience in relevant fields
• Bachelor's degree in Computer Science, Information Systems, or related field, or equivalent experience.
• Strong ability to build and maintain constructive relationships across diverse teams.
• Effective communication skills for both technical and non-technical audiences.
• Experience managing projects involving multiple stakeholders.

Preferred Qualifications :

• 8+ years of system documentation and/or technical writing experience.
• Master’s degree in STEM or equivalent.

Additional Qualities :

Actively participates in shaping company culture, demonstrates cultural norms, is willing to travel as needed, and fulfills business needs including extra time and team support. At CSAA IG, we are committed to protecting our community and our planet, emphasizing inclusion, belonging, and innovation.

Recognition : We offer a comprehensive compensation package, performance bonus, 401(k) with company match, and more!