Senior Cybersecurity Specialist

Profile

(This will open in a new window from which you will be automatically redirected to an external site after 5 seconds)
Senior Cybersecurity 
Specialist - Cybersecurity Regulatory Assessment
At Liberty Mutual Insurance, we believe progress happens when people feel secure.  Our Cybersecurity Specialists continually evolve and adapt our organization and practices to deliver against growing regulatory requirements, increased threats, and changing people, processes, and technology drivers.
Our Cybersecurity Governance, Risk, and Compliance (cGRC) organization manages IT compliance and cybersecurity risk supported by an integrated set of products and services that support the lifecycle of our assessment functions. From design and documentation of controls, to testing and assessment of our enterprise and information systems, to consulting on and validation of issues and remediations, we partner with teams across the company to understand their business drivers and optimize security practices in relation to external/regulatory drivers, cybersecurity frameworks, and organizational risk posture.
As a Senior Cybersecurity Specialist in the Cybersecurity Regulatory Assessment space, you will support assessments across our organization, increasing our team's global impact while supporting multinational business needs. You would be responsible for evaluating, assisting with delivery and reporting results of our cybersecurity regulatory and contractual assessment programs. You will evaluate and report results on the effectiveness of security and/or compliance controls as well as risk mitigation strategies. You will independently and collaborate on the coordination, analysis, management, and delivery of assessments to support internal and external partners, auditors, and regulators across our organization.
Ideal candidates have a passion for security, the drive to share their expertise, and the ability to collaborate and help teams deliver solutions that meet our business goals while protecting the confidentiality, integrity and availability of information systems and our data.
About the job
Partners with global service delivery and assessment teams to coordinate, analyze, manage, and deliver results to meet regulatory and or contractual needs including responding to requests.
Advises on impacts and recommends solutions specific to people, process, and technology changes in the environment.
Contributes to the creation and curation of a comprehensive cybersecurity risk and compliance control framework and library.
Seeks and encourages opportunities for reuse and alignment to support multiple cybersecurity frameworks, regulatory requirements, and contractual obligations.
Evaluates and assesses compliance to regulatory requirements and contractual obligations.
Collaborates and act as liaison to internal and external partners, auditors, and regulators.
Delivers regulatory and contractual assessments using Agile concepts and methodologies and with an Agile mindset.
The Ideal Candidate Will have:
Knowledge and experience working with; cybersecurity controls, IT auditing, risk and regulatory assessment best practices, cybersecurity and compliance frameworks such as CIS Controls, NIST CSF, ISO 27001, FAIR, COBIT, GDPR/CCPA, International Financial Services and Insurance regulatory landscape and willingness to learn about regulatory assessments in the financial services or other regulated industries is a plus.
Ability to assess technology and processes to determine risks, regulatory impacts, and relationships with corresponding controls, gaps and applicable testing strategies
Ability to document controls, assessments, effectively communicate technical and regulatory issues and impacts with a diverse audience and have knowledge and/or experience in technical domains.
Working knowledge and practice of IT security, risk and compliance concepts, processes and able to execute existing patterns.
Highly collaborative with peers and customers on a technical and professional level and driven to improve service and engagement models.
Ability to understand and align business drivers in relation to compliance considerations
Experience building, executing, or managing end-to-end review, scoping, assessment, and reporting requirements for a regulatory or contractual compliance program
Ability to scope and integrate control frameworks and regulatory requirements into enterprise controlsand advise on control design to meet cybersecurity risk and compliance needs
Knowledge of Agile practices and experience working with scrum teams
Strong negotiation, facilitation and consensus building skills; strong oral and written communication skills; strategic and holistic thinking; able to present to senior contributors and management
Desired skills:
Bachelors or Master's degree in technical discipline or equivalent experience.
5 years of professional experience.
One or more relevant certifications preferred: CISA, CRISC, ITIL, CISSP
Highly capable consultative skills, including the ability to understand and assist in applying customer requirements.
Knowledge of and experience with cybersecurity control, program, and risk frameworks such as CIS Controls, NIST CSF, ISO 27001, and relevant global frameworks preferred
Strong collaboration, prioritization, and adaptability skills required. Relationship building
Independent decision making
Analytical thinking; thinking out of the box
Highly collaborative with peers, customers, and stakeholders on a technical and professional level and driven to improve service and engagement models.
Ability to effectively communicate with all organizational levels
Organized and detail-oriented
Ability to understand, interpret, and align requirements to corresponding IT controls
Ability to effectively implement the D&I guidelines for inclusion in daily activities

Company info

Sign Up Now - WashingtondcCrossing.com