Назад
Company hidden
6 дней назад

Security Risk Analyst (Cybersecurity)

70 138 - 100 000$
Формат работы
hybrid
Тип работы
fulltime
Грейд
middle
Английский
b2
Страна
US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Security Risk Analyst (Cybersecurity): Conducting enterprise-wide security risk assessments and managing risk governance across a cloud platform for the insurance industry with an accent on regulatory compliance, security frameworks, and quantitative risk analysis. Focus on evaluating vulnerabilities and third-party risks, documenting mitigation strategies, and improving governance processes through GRC tracking and continuous service improvements.

Location: Hybrid, Chicago (Green St), Illinois, United States

Salary: $70,138.85–$100,000.00 annually, plus bonus and/or commission eligibility.

Company

hirify.global provides a cloud platform and AI-powered technology for the insurance economy, supporting insurers, repairers, automakers, and parts suppliers.

What you will do

  • Conduct continuous, enterprise-wide risk assessments with compliance and security teams.
  • Manage risk identification, validation, documentation, and tracking in the GRC platform.
  • Support internal and external audits, customer security inquiries, and compliance initiatives.
  • Assess privacy, security, business continuity, vendor, and regulatory compliance risks.
  • Recommend and document security improvements, mitigation strategies, and risk acceptance or rejection decisions.
  • Maintain governance documentation, define security metrics, support strategic planning, and improve security processes.

Requirements

  • Minimum four years of cybersecurity experience and a required BS in Computer Science, MIS, or Cybersecurity.
  • Experience responding to security-related audits or customer and auditor queries.
  • Experience assessing and processing risk through a formal risk management process.
  • Basic understanding of IT technology, including the OSI seven-layer model, TCP/IP, encryption, risk-rating methodology, and security concepts.
  • Familiarity with PCI DSS, SOX, HIPAA, GDPR, and GLBA requirements.
  • Working knowledge of ISO and NIST security frameworks.
  • Strong written and verbal communication skills, including the ability to explain complex security concepts to non-technical audiences.
  • Understanding of incident response, system configuration, vulnerability management, and security hardening practices.
  • Critical-thinking skills and the ability to work independently without constant detailed instructions.

Nice to have

  • Security certification such as CISSP or CISA.
  • ITIL or ITSM-related certification or coursework.

Culture & Benefits

  • Full-time employment in a values-driven environment focused on integrity, customer focus, innovation, inclusion and diversity, tenacity, and connection.
  • 401(k) match, paid time off, annual incentive plan performance bonus, and comprehensive health insurance.
  • Adoption assistance, tuition reimbursement, wellness programs, stock purchase plan options, and employee resource groups.
  • CCC emphasizes career development, collaboration, diverse perspectives, and opportunities to make real-life impacts.

Hiring process

  • A video interview is required and will be transcribed.
  • Generative AI or automated assistance is not permitted during interviews unless explicitly allowed by the interview team for a specific exercise.

Будьте осторожны

Если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого. Это мошенники. Обязательно жмите «Пожаловаться» или пишите в поддержку. Подробнее в гайде →