Cyber Security Risk & Compliance Analyst

QBE North America is a company focused on enabling a more resilient future for its customers and communities. They are seeking a Cyber Security Risk & Compliance Analyst to provide guidance on security compliance, risk, and audit strategies, while performing assessments to meet regulatory requirements. The role involves collaborating with stakeholders to identify risks and ensure adherence to security policies and best practices.

Responsibilities

• Contribute to the delivery of an effective Cyber and information security Capability across the organization
• Identify and assess risks within your subject matter area, lead risk-related dialogue as the SME for that domain, and support stakeholders in making informed, risk-based decisions
• Mitigate risks in delivery while keeping to agreed plan and timeframes
• Take personal accountability for identifying security weaknesses and ensuring mitigation to a secure conclusion
• Engage across the organisation to ensure issues are identified, self-reported, and notified to key stakeholders
• Act with integrity and transparency in threat and risk identification and problem solving
• Role model the creation and innovation of solutions and threat mitigation strategies
• Contribute to the development, execution, and assurance of an effective Cyber practice
• Collaborate across departments to avoid security problems manifesting as business problems
• Maintain knowledge of relevant regulatory requirements and apply it in all tasks
• Monitor regulatory developments and advise on changes to promote awareness
• Assist in the preparation of reports and ensure accuracy and completeness for submission
• Support the delivery of security compliance and risk services ensuring compliance with appropriate SLAs and quality controls and alignment with security, regulatory and business requirements
• Track security compliance and risk service benefit to specifically identify areas of continuous improvement

Skills

• Bachelor's Degree in cyber security, information security, information technology, management, or business or equivalent combination of education and work experience
• Experience with security and risk-based standards such as ISO27001, ISO 31000, NIST 800
• Working across time zones and collaborating in a multicultural environment
• Helping businesses, partners, and customers become more innovative and fast-paced to improve business agility
• CRISC

Benefits

• Hybrid Working – a mix of working from home and in the office
• 22 weeks of paid leave for family growth, with 12 weeks available to all parents on a gender-equal basis
• Competitive 401(k) program with company match up to 8%
• Well-being program including holistic wellbeing coaching, gym membership, confidential counselling, financial and legal advice
• Tuition Reimbursement for professional certifications, and continuing education
• Employee Network and Community – QBE actively supports six Employee Networks, and many ways to give back to your community

Company Overview