Cybersecurity Engineer - GRC

Chubb; Philadelphia (Philadelphia County); On-site; USD 120,000 - 180,000; Full time

Job summary

Chubb is seeking a Cybersecurity Engineer - GRC to strengthen governance, risk, and compliance across our cybersecurity environment. You will be a hands-on ServiceNow IRM platform specialist driving automation, risk scoring, and executive reporting to enhance risk visibility and mitigation.

Responsibilities include designing automated control testing workflows, owning IRM workflows, and building integrations. A strong background in Python scripting and GRC technology is essential.

Qualifications

• Minimum 5 years of related cybersecurity engineering experience including GRC technology, IT automation, or security platform engineering.
• Hands-on ServiceNow development experience, preferably IRM module; other GRC platforms acceptable.
• Demonstrated Python scripting experience in production or automation environments.
• Experience supporting cyber risk, compliance, or audit functions.
• ServiceNow certification such as CIS-IRM or equivalent is a plus.
• Experience with API and integration development for platform connectors is a plus.
• Familiarity with insurance or financial services risk and compliance environments is a plus.

Responsibilities

• Design and implement automated control testing workflows in partnership with the Cyber Risk & Assurance Manager.
• Own and enhance ServiceNow IRM workflows, including issue and exception management, automated ticketing, and compliance tracking.
• Implement and maintain automated risk scoring and InfoSec criticality rating calculations based on methodology defined by the Cyber Risk Assessment team.
• Build and maintain custom workflows, connectors, and integrations within ServiceNow IRM to support expanding GRC Engineering use cases.
• Analyze control, risk, and exception data to identify trends, validate potential gaps, and surface issues that require remediation before they become realized risk.
• Support executive reporting by translating technical findings into clear, actionable insight on application security risk and broader cybersecurity exposure.
• Help optimize the GRC platform through automation, AI-enabled capabilities, and workflow improvements.
• Partner cross-functionally to ensure the platform ecosystem supports evolving security requirements.

Skills

GRC engineering

ServiceNow development

Python scripting

IT automation

API integration

Security platform engineering

Education

Bachelor's degree in Computer Science/Information Systems/Cybersecurity

Tools

ServiceNow IRM

Job description

As a Cybersecurity Engineer - GRC here at Chubb, you will apply engineering, automation, and data analytics principles to strengthen governance, risk, and compliance across our cybersecurity environment. You will serve as a hands-on platform specialist for ServiceNow IRM, helping optimize and enhance the GRC ecosystem so it continues to meet Chubb’s evolving cybersecurity analytics, compliance, and risk management needs. In this role, you will connect data, controls, and risk signals to drive deeper risk analysis, proactively identify potential issues before risk is realized, and support executive reporting on application security exposure and broader cybersecurity risk. You will also play a key role in managing the platform, including how data is reviewed, how workflows are executed, and how AI capabilities are leveraged within the platform to improve automation, insight generation, and operational efficiency.

In this role, you will:

• Design and implement automated control testing workflows in partnership with the Cyber Risk & Assurance Manager, including detailed automation playbooks for compliance and control testing
• Own and enhance ServiceNow IRM workflows, including issue and exception management, automated ticketing, and compliance tracking
• Implement and maintain automated risk scoring and InfoSec criticality rating calculations based on methodology defined by the Cyber Risk Assessment team, while ensuring the logic remains aligned as the methodology evolves
• Build and maintain custom workflows, connectors, and integrations within ServiceNow IRM to support expanding GRC Engineering use cases
• Analyze control, risk, and exception data to identify trends, validate potential gaps, and surface issues that require remediation before they become realized risk
• Support executive reporting by translating technical findings into clear, actionable insight on application security risk and broader cybersecurity exposure
• Help optimize the GRC platform through automation, AI-enabled capabilities, and workflow improvements that strengthen Chubb’s cybersecurity analytics and risk management posture
• Partner cross-functionally to ensure the platform ecosystem continues to support Chubb’s broader technical environment and evolving security requirements

Qualifications

• A minimum of 5 years of related cybersecurity engineering experience inclusive of GRC technology, IT automation, or security platform engineering
• Hands-on ServiceNow development experience, with strong preference for the IRM module; experience with other GRC modules and/or platforms is also acceptable
• Demonstrated Python scripting experience in a production or automation environment
• Experience supporting cyber risk, compliance, or audit functions
• Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, or a related field, or equivalent practical experience
• ServiceNow certification, such as CIS-IRM or equivalent, is a plus
• Experience with API and integration development for platform connectors is a plus
• Familiarity with insurance or financial services risk and compliance environments is a plus

About Us

Chubb is a world leader in insurance. With operations in 54 countries, Chubb provides commercial and personal property and casualty insurance, personal accident and supplemental health insurance, reinsurance, and life insurance to a diverse group of clients. The company is distinguished by its extensive product and service offerings, broad distribution capabilities, exceptional financial strength, underwriting excellence, superior claims handling expertise and local operations globally.

At Chubb, we are committed to equal employment opportunity and compliance with all laws and regulations pertaining to it. Our policy is to provide employment, training, compensation, promotion, and other conditions or opportunities of employment, without regard to race, color, religious creed, sex, gender, gender identity, gender expression, sexual orientation, marital status, national origin, ancestry, mental and physical disability, medical condition, genetic information, military and veteran status, age, and pregnancy or any other characteristic protected by law. Performance and qualifications are the only basis upon which we hire, assign, promote, compensate, develop and retain employees. Chubb prohibits all unlawful discrimination, harassment and retaliation against any individual who reports discrimination or harassment.

Job Info

• Job Identification 35569
• Job Schedule Full time
• Regular or Temporary Regular
• Job Category Info Security and IT Compliance
• Business Unit United States
• Legal Employer ACE American Insurance Company