Our client is an MNC firm, looks after the commercial insurance needs of major global corporations as well as SMEs, professionals and sole traders.
Role:
The Security Risk Analyst supports company's underwriting program by identifying, evaluating, and report cybersecurity risk across companys clients. The Security Risk Analyst uses knowledge and experience to assist in examining vulnerabilities and other potentially adverse issues, and partners with company's stakeholders and clients to mitigate risk to an acceptable level. Also will assist in the risk assessment process to document and support the likelihood of risk and the overall impact to the business.
Responsibilities:
- Approve and implement cybersecurity plans for insureds either developed by the analyst or developed by contracted third parties.
- Assist in identifying potential cybersecurity risks to company’s clients utilizing available tools and data.
- Assist in evaluating risk controls that mitigate cybersecurity risk and find gaps where vulnerabilities could potentially cause unanticipated liabilities and/or losses.
- Provide cybersecurity advisory/consultative services to company's underwriters, brokers, and clients.
- Assist in evaluation of appropriate risk mitigation tools for underwriting and help to develop implementation plans).
- Develop and maintain cybersecurity subject matter expertise.
- Assist in developing and presenting high-level risk reviews and analyses to company's underwriters, senior leaders, and clients on specific risks.
- Liaise and inform the CAT Cyber management plan; co-establish best practices for risk mitigation in the event of a catastrophic event.
- Engage and support the underwriting team and brokers and insureds in cybersecurity education.
- Assist with researching, identifying, evaluating, selecting, and negotiating with partners to expand the value-add services that company's underwriting team brings to cybersecurity risk management.
- Lead alerting process with clients, applicants, brokers, and underwriters leveraging existing tools and capabilities to identify and mitigate existing high-risk vulnerabilities.
- Recognize and communicate internal and external developments that may impact cybersecurity risk.
- Create and manage recurring reporting mechanisms (reports, dashboards, etc.).
- Lead alerting process with clients, applicants, brokers, and underwriters leveraging existing tools and capabilities to identify and mitigate existing high-risk vulnerabilities.
- Manage company's real-time vendor exposure using outside vendor data
- Recognize and communicate internal and external developments that may impact cybersecurity risk.
- Assist in evaluating risk controls that mitigate cybersecurity risk and find gaps where vulnerabilities could potentially cause unanticipated liabilities and/or losses.
- Provide cybersecurity advisory/consultative services to company's underwriters, brokers, and clients.
- Liaison between underwriters and risk management vendors.
- Assist in developing and presenting high-level risk reviews and analyses to Markel's underwriters, senior leaders, and clients.
- Engage and support the underwriting team and brokers in cybersecurity education.
- Assist with researching, identifying, evaluating, selecting, and negotiating with partners to expand the value-add services that Markel's underwriting team brings to cybersecurity risk management.
- Lead and manage vendor aggregation reporting (reports, dashboards, etc.).
- Create and manage recurring reporting mechanisms (reports, dashboards, etc.).
- Develop and maintain cybersecurity subject matter expertise.
Requirements:
- Bachelor's degree in Information Security or Computer Science, or related work experience/certification.
- Certified in Risk and Information Systems Control (CRISC)/Certified Information Systems Security Professional (CISSP)
- Minimum of three years combined IT, risk management, cybersecurity work experience.
- Experience with vulnerability management tools.
- Experience with cyber risk scorecard tools.
- Experience with IT process, risk, and control frameworks, such as NIST and ISO.
- Critical thinking and attention to detail.
- Cloud computing.
- Good communication, organization, documentation, and presentation skills.
Interested candidates are requested to send their resume to [email protected]
