Cybersecurity Analyst III

US001 CMFG Life Insurance Company; Madison (WI); Hybrid; USD 95,000 - 142,500; Full time

Benefits offered by this job

Medical, dental, and vision insurance

401(k) plan

Tuition reimbursement

Flexible workplace options

Job summary

US001 CMFG Life Insurance Company is seeking a Cybersecurity professional to monitor threats, coordinate incident response, and develop essential security policies. Candidates should possess a Bachelor's degree in computer science or a related field and demonstrate at least 3 years of relevant experience within the cybersecurity domain.

Responsibilities include assessing the security posture of vendors and participating in compliance-related activities. Excellent communication skills and a proactive approach to incidents are crucial in this vital role.

Qualifications

• 3+ years of experience in cybersecurity audit, engineering, or architecture.
• Knowledge of cybersecurity regulations like PCI-DSS, NYDFS, CCPA.
• Proficiency in creating security policies and incident response plans.

Responsibilities

• Monitor threats related to cybersecurity.
• Coordinate incident response efforts.
• Review and evaluate third-party security postures.

Skills

Cybersecurity audit proficiency

Risk assessment

Vulnerability assessments

Incident response

Communication skills

Relationship management

Education

Bachelor’s degree in computer science or related field

Job description

Job Responsibilities

• Continuously monitor the internal and external landscape for relevant events, risks, and threats related to malicious code, vulnerabilities, and potential attacks in alignment with the MITRE ATT&CK framework.
• Remain current with emerging threats and share knowledge with colleagues to improve incident response processes.
• Help coordinate and ensure cybersecurity-related alerts and incidents are prioritized and responded to at all hours of the day.
• Act as a technology, service or process owner as appropriate, ensuring appropriate documentation, configuration, maintenance and access reviews of technologies, vended services and processes.
• Participate in coordination, consultation, and assessment efforts to track and remediate events and alerts, direct response to related incidents, internal or external audits, and control assessments.
• Collaborate with Enterprise Information & Technology (EI&T) teams to protect data from compliance, privacy or security compromises.
• Participate in the creation and execution of tabletop, purple team, and attack simulation exercises designed to identify gaps, improve skills, enhance communication and engage with key stakeholders.
• Review findings from tabletop exercises, vulnerability scans and penetration testing to identify weaknesses or gaps in existing security controls and assist in providing recommendations where appropriate.
• Review and evaluate third‑party security posture, identify risks, document findings, and support remediation efforts to ensure vendors and partners meet organizational security standards.
• Identify risks throughout the organization, report and monitor risk formats and develop methodologies for assessment of risks.
• Contribute to the development, tracking, and reporting of security metrics and KPIs for team activities, using insights to drive continuous improvement, reduce security risk and inform other security education opportunities.
• Provide strategic direction of the Cybersecurity team to develop new capabilities, process efficiencies and goals.
• Assist in the development, review, maintenance and development of security policies, standards, processes, procedures and requirements to facilitate common administrative controls.
• Develop content for organization‑wide and targeted security awareness training.
• Present relevant cybersecurity topics through a variety of forums depending on the audience.
• Support leadership with all aspects of the cybersecurity enterprise‑wide risk management program, with minimal supervision.
• Participate in various security assessments in support of compliance, privacy or security requirements for the enterprise.
• Lead localized assessments where appropriate.
• Provide cybersecurity guidance as appropriate and Escalate issues as deemed appropriate.

Job Requirements

• Bachelor’s degree in computer science, information systems, or related field, or equivalent combination of education and/or related professional work experience.
• 3+ years of demonstrated proficiency with a cybersecurity audit, assessment, engineering or architecture focus or comparable professional experience.
• Knowledge of cybersecurity regulations, guidance and policies (e.g., PCI‑DSS, NYDFS, CCPA).
• Knowledge of general security concepts and methods such as vulnerability assessments, privacy assessments, intrusion detection, incident response, security policy creation, enterprise security strategies, and governance.
• Proven ability to clearly and effectively communicate business and technical information, both verbally and in writing.
• Basic leadership and teaming skills as well as demonstrated integrity within a professional environment.
• Aptitude for speaking or communicating to varied groups of business and technical professionals.
• Experience in presenting technical material to a non‑technical audience and to senior management.
• Experience in the review and development of security policies, standards or other governance practices.
• Demonstrated relationship management and consulting skills, including ability to effectively influence and negotiate.
• Proven ability to provide high‑quality customer service.
• Preferred: Financial Services industry experience.

Compensation

Base Salary Range: $95,000.00 - $142,500.00. In addition to your base pay, you may be eligible for an annual incentive (bonus) plan.

Benefits

• Medical, dental, and vision insurance.
• Employee assistance program, life and disability insurance.
• Parental leave and paid time off.
• 401(k) plan and retirement assistance.
• Tuition reimbursement.
• Flexible workplace options including hybrid working arrangements.