This job posting is for a Cyber Risk Analyst at CSAA Insurance Group (CSAA IG), a top personal lines property and casualty insurer. The role is remote, and the position involves supporting the management of IT risks, providing cybersecurity subject matter expertise, and ensuring compliance and risk management across various platforms, including cloud environments.

Other Jobs You May Be Interested In

Key Responsibilities:

Security Risk Management:
- Conduct risk assessments and report on IT security compliance.
- Support business projects to identify and address security concerns.
- Track and manage security findings and exceptions in a governance, risk, and compliance (GRC) platform.
- Develop security dashboards to inform risk management teams and leadership.
Cyber Risk Quantification:
- Use the FAIR methodology to model cyber risks and quantify their likelihood and impact.
- Develop threat models using the MITRE ATT&CK framework.
- Support technology risk management decisions with robust methodologies and models.
Third-Party Risk Management:
- Conduct reviews of third-party/vendor risk assessments.
- Manage and track third-party risks within a designated project portfolio.

Required Experience and Skills:

8+ years of work experience in relevant fields.
Bachelor’s degree in Computer Science, Information Systems, or a related field, or equivalent experience.
Strong ability to build and maintain relationships within diverse teams and communicate effectively with both technical and non-technical audiences.
Experience managing projects with cross-department collaboration.

Preferred Qualifications:

Master’s degree in a STEM field.
System documentation and technical writing experience (8+ years preferred).
Active participation in company culture-building activities (e.g., employee resource groups, volunteering).

What Makes You a Great Fit:

Strong communication skills for both technical and non-technical stakeholders.
Ability to manage multiple projects, collaborating with various teams and stakeholders.
Willingness to travel as needed for divisional/team meetings and other in-person gatherings.

CSAA IG’s Culture and Benefits:

CSAA IG is committed to diversity, inclusion, and supporting employees’ growth and development.
Total compensation includes performance bonuses, a 401(k) with company match, and more.

This is an opportunity for someone with significant experience in cybersecurity and IT risk management to join a reputable organization that values innovation, inclusion, and community.

Cyber Risk Analyst – Remote id-5084