GRC Automation Engineer — Cyber Risk & IRM

Chubb European Group Ltd.; Philadelphia (Philadelphia County); On-site; USD 90,000 - 130,000; Full time

Job summary

Chubb European Group Ltd. is seeking a Cybersecurity Risk Analyst to advance GRC engineering, automation, and data analytics across our cybersecurity environment.

The role focuses on hands-on ServiceNow IRM development, automation playbooks, and improving risk scoring and executive reporting. You will design automated testing workflows, maintain integration pipelines, and collaborate across teams to strengthen Chubb’s security analytics posture while adapting to evolving requirements.

Qualifications

• Minimum 5 years of experience in GRC, IT automation, or security platform engineering.
• Hands-on ServiceNow development experience, preferably IRM module.
• Python scripting experience in a production or automation environment.
• Experience supporting cyber risk, compliance, or audit functions.
• Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, or related field, or equivalent practical experience.
• ServiceNow certification, such as CIS-IRM or equivalent, is a plus.
• Experience with API and integration development for platform connectors is a plus.
• Familiarity with insurance or financial services risk and compliance environments is a plus.

Responsibilities

• Design and implement automated control testing workflows in partnership with the Cyber Risk & Assurance Manager, including detailed automation playbooks for compliance and control testing.
• Own and enhance ServiceNow IRM workflows, including issue and exception management, automated ticketing, and compliance tracking.
• Implement and maintain automated risk scoring and InfoSec criticality rating calculations based on methodology defined by the Cyber Risk Assessment team.
• Build and maintain custom workflows, connectors, and integrations within ServiceNow IRM to support expanding GRC Engineering use cases.
• Analyze control, risk, and exception data to identify trends, validate potential gaps, and surface issues that require remediation before they become realized risk.
• Support executive reporting by translating technical findings into clear, actionable insight on application security risk and broader cybersecurity exposure.
• Help optimize the GRC platform through automation, AI-enabled capabilities, and workflow improvements that strengthen Chubb’s cybersecurity analytics and risk management posture.
• Partner cross-functionally to ensure the platform ecosystem continues to support Chubb’s broader technical environment and evolving security requirements.

Skills

GRC technology

IT automation

Security platform engineering

Python scripting

Audit support

Education

Bachelor's degree in CS/IS/Cybersecurity

Tools

ServiceNow IRM

APIs & Integrations

Automation tooling

Job description

Chubb European Group Ltd. is seeking a Cybersecurity Risk Analyst to advance GRC engineering, automation, and data analytics across our cybersecurity environment.

The role focuses on hands-on ServiceNow IRM development, automation playbooks, and improving risk scoring and executive reporting. You will design automated testing workflows, maintain integration pipelines, and collaborate across teams to strengthen Chubb’s security analytics posture while adapting to evolving requirements.