Senior Cybersecurity Risk Advisor - Remote

CSAA; Arizona; Remote; USD 137,000 - 182,000; Full time

Job summary

CSAA Insurance Group (CSAA IG) is seeking a senior Cybersecurity Analyst V to serve as a strategic risk advisor for business and technology leaders, identifying and managing complex cybersecurity and technology risks. The role emphasizes autonomous leadership across risk initiatives, governance, and controls.

Remote role open throughout the United States with exceptions for Hawaii and Alaska. The right candidate will translate technical risk into business impact and guide cybersecurity

Qualifications

• 8–10 years of progressive experience in cybersecurity and technology risk management.
• Experience leading complex analyses or cross-functional initiatives with autonomy.
• Experience applying cybersecurity risk management methodologies, control frameworks, and supporting tools in an enterprise.
• Bachelor's degree in Cybersecurity, Information Systems, Computer Science, Information Technology, or related field; or equivalent practical experience.

Responsibilities

• Lead risk advisory and assessment for complex initiatives and emerging technologies; translate risk into business impact.
• Provide strategic guidance on risk governance, controls, and operational implications to technology and business partners.
• Lead capability-building, risk framework, reporting, tooling, and maturity improvement across cybersecurity domains.
• Mentor analysts and risk professionals, monitor emerging threats and regulatory requirements to strengthen risk advisory capabilities.

Skills

Cybersecurity

Risk management

Governance

Cross-functional collaboration

Analytical thinking

Communication

Education

Bachelor's degree in Cybersecurity, Information Systems, CS, IT or related field

Job description

CSAA Insurance Group (CSAA IG) is seeking a senior Cybersecurity Analyst V to serve as a strategic risk advisor for business and technology leaders, identifying and managing complex cybersecurity and technology risks. The role emphasizes autonomous leadership across risk initiatives, governance, and controls.

Remote role open throughout the United States with exceptions for Hawaii and Alaska. The right candidate will translate technical risk into business impact and guide cybersecurity