Вакансия из Hirify Global, списка международных tech-компаний Для мэтча и отклика нужен Plus
Пожаловаться
Зарплата и рынок
Нижеразвернуть
$70к-100к/год
$100к$120кмедиана$140к
По похожим ролям (50) ~ $120к/год
На СНГ рынке: $2.9к/мес ($2.1к - $3к)
74
Хорошая вакансия
развернуть
Роль четко сосредоточена на управлении рисками и security governance в развитой продуктовой компании; обязанности и льготы описаны подробно.
Ниже рынка
Четкие задачи
Развитый продукт
Хороший пакет льгот
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Подключить Plus
Описание вакансии
Текст:
Hirify AI/Оригинал
TL;DR
Security Risk Analyst (Cybersecurity): Conducting enterprise-wide security risk assessments and managing risk governance across a cloud platform for the insurance industry with an accent on regulatory compliance, security frameworks, and quantitative risk analysis. Focus on evaluating vulnerabilities and third-party risks, documenting mitigation strategies, and improving governance processes through GRC tracking and continuous service improvements.
Location: Hybrid, Chicago (Green St), Illinois, United States
Salary: $70,138.85–$100,000.00 annually, plus bonus and/or commission eligibility.
Company
hirify.global provides a cloud platform and AI-powered technology for the insurance economy, supporting insurers, repairers, automakers, and parts suppliers.
What you will do
Conduct continuous, enterprise-wide risk assessments with compliance and security teams.
Manage risk identification, validation, documentation, and tracking in the GRC platform.
Support internal and external audits, customer security inquiries, and compliance initiatives.
Assess privacy, security, business continuity, vendor, and regulatory compliance risks.
Recommend and document security improvements, mitigation strategies, and risk acceptance or rejection decisions.
Maintain governance documentation, define security metrics, support strategic planning, and improve security processes.
Requirements
Minimum four years of cybersecurity experience and a required BS in Computer Science, MIS, or Cybersecurity.
Experience responding to security-related audits or customer and auditor queries.
Experience assessing and processing risk through a formal risk management process.
Basic understanding of IT technology, including the OSI seven-layer model, TCP/IP, encryption, risk-rating methodology, and security concepts.
Familiarity with PCI DSS, SOX, HIPAA, GDPR, and GLBA requirements.
Working knowledge of ISO and NIST security frameworks.
Strong written and verbal communication skills, including the ability to explain complex security concepts to non-technical audiences.
Understanding of incident response, system configuration, vulnerability management, and security hardening practices.
Critical-thinking skills and the ability to work independently without constant detailed instructions.
Nice to have
Security certification such as CISSP or CISA.
ITIL or ITSM-related certification or coursework.
Culture & Benefits
Full-time employment in a values-driven environment focused on integrity, customer focus, innovation, inclusion and diversity, tenacity, and connection.
401(k) match, paid time off, annual incentive plan performance bonus, and comprehensive health insurance.
Adoption assistance, tuition reimbursement, wellness programs, stock purchase plan options, and employee resource groups.
CCC emphasizes career development, collaboration, diverse perspectives, and opportunities to make real-life impacts.
Hiring process
A video interview is required and will be transcribed.
Generative AI or automated assistance is not permitted during interviews unless explicitly allowed by the interview team for a specific exercise.
Будьте осторожны
Если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого. Это мошенники. Обязательно жмите «Пожаловаться» или пишите в поддержку. Подробнее в гайде →