Allstate · 18 hours ago

Senior Cyber Risk Assessor (Remote - Home Based Worker)

US - Remote

Full-time

Remote

Mid, Senior Level

$74K/yr - $134K/yr

4+ years exp

Maximize your interview chances

BankingFinance

No H1B

Insider Connection @Allstate

Discover valuable connections within the company who might provide insights and potential referrals.
Get 3x more responses when you reach out via email instead of LinkedIn.

Responsibilities

Conduct risk assessments at the network, systems, platform, and application level

Address and provide guidance on wide range of security issues including architectures, platforms including Public Cloud, electronic data traffic, and network access

Drive company’s efforts to proactively identify, assess, and communicate the company’s information security risks to leadership and board

Ensure compliance with security policies and standards

Work in close partnership with internal information security and business representatives to scope assessments, gather documentation, interview clients, identify risks, document findings, and ensure transparent management of risks

Work independently to complete high quality threat-based risk assessments across a diverse set of technologies, business functions, and platforms

Proactively drive process improvements, overcome barriers to success, build professional relationships across the company, brief senior leaders, and mentor others

Qualification

Find out how your skills align with this job's requirements. If anything seems off, you can easily click on the tags to select or unselect skills to reflect your actual expertise.

Cybersecurity ControlsCybersecurity Risk AssessmentInformation Security Risk ManagementIT Security Best PracticesNIST CSFISOHI TrustFAIRPCI DSSGDPRHIPAACCPAGRC ToolsRSA ArcherSecurity ScorecardBitSightCRISCCISMCISACISSPCompTIASANS Institute/GIAC

Required

4+ years of IT experience with credentials in infrastructure, development, and/or cyber risk assessments

Good understanding of IT security best practices

Experience with information security risk management framework, assessment, audit, and controls based on industry standard frameworks (i.e., NIST CSF; ISO; HI Trust, FAIR)

Experience with regulatory requirements (i.e., PCI; GDPR; HIPPA; CCPA; etc.)

Experience using GRC tools and technologies in support of the assessment/audit process (RSA Archer, Security Scorecard, BitSight, etc.)

Experience gathering information from a range of different sources to help identify weaknesses in security controls

Preferred

Relevant security/computer science education and/or industry standard certifications preferred (i.e., CRISC, CISM, CISA, CISSP, CompTIA, SANS Institute/GIAC)