Senior Technology Risk & GRC Lead

Berkshire Hathaway Specialty Insurance; Boston (MA); On-site; USD 140,000 - 170,000; Full time

Benefits offered by this job

Health, Dental, Vision

Disability Insurance

Life Insurance

AD&D Insurance

Flexible Spending Accounts

Health Reimbursement Account

Employee Assistance Program

401(k) match

Paid time off

Tuition Reimbursement

Paid Parental Leave

Job summary

Berkshire Hathaway Specialty Insurance is seeking a Technology Senior Risk Analyst to advance the GRAC program, coordinating risk identification, assessment, and continuous monitoring across enterprise IT risk practices.

The role involves defining and socializing KRIs/KPIs, dashboards, trends, and heat maps, while collaborating with risk owners and senior stakeholders. A strong governance mindset and global collaboration are essential.

Qualifications

• 10+ years of experience in Technology risk, Technology audit/compliance, or cyber GRC
• Experience running RCAs, defining KRIs/KPIs, and presenting risk insights to senior stakeholders
• Strong documentation skills, including writing risk narratives, control designs, control matrices, testing procedures, and remediation plans
• Effective communication and partnership skills; able to challenge constructively and receive challenge professionally
• Experience conducting vendor risk reviews, including SOC 2 analysis, control gap identification, and remediation follow-up
• Solid background knowledge of major risk and control frameworks (Technology, Cyber, Enterprise) such as NIST CSF, COSO ERM, COBIT
• Working knowledge of U.S. Technology regulations (SOX, CCPA/CPRA, PCI, NY-DFS) recommended
• Familiarity with global regulatory frameworks (GDPR, DORA, MAS, APRA) preferred but not required
• Ability to work in a team-based environment and communicate effectively domestically and globally
• AI experience a plus, including understanding of AI risks or regulatory requirements
• Professional certifications such as CRISC, CISA, CISM, CISSP or ISO/IEC 27001 Lead Implementer/Auditor are a plus

Responsibilities

• Lead risk identification, risk assessment, and ongoing monitoring

Skills

Technology risk

Risk assessment

RCAs

KRIs/KPIs

Risk dashboards

Vendor risk

SOC 2 analysis

NIST CSF

COSO ERM

Executive communication

Education

CRISC

CISA

CISM

CISSP

ISO 27001 Lead Auditor

Tools

Workiva

AuditBoard

ServiceNow

Drata

Vanta

Job description

Berkshire Hathaway Specialty Insurance is seeking a Technology Senior Risk Analyst to advance the GRAC program, coordinating risk identification, assessment, and continuous monitoring across enterprise IT risk practices.

The role involves defining and socializing KRIs/KPIs, dashboards, trends, and heat maps, while collaborating with risk owners and senior stakeholders. A strong governance mindset and global collaboration are essential.