[Hiring] Cybersecurity Analyst V @CSAA Insurance Group, a AAA Insurer

Role Description

As a senior cybersecurity risk professional, you will serve as a strategic advisor to business and technology leaders, helping identify, assess, and manage complex cybersecurity and technology risks. You will lead cross-functional risk initiatives, influence security and risk management strategies, and help strengthen the organization's risk posture. This role requires the ability to translate technical risks into clear business impact, provide actionable recommendations, and guide decision-making related to cybersecurity investments, controls, and governance. Operating with a high degree of autonomy, you will build trusted partnerships across the organization and contribute to the continuous evolution of cybersecurity risk management practices.

Your Work:

• Risk advisory and assessment:
  • Lead cross-domain cybersecurity and technology risk assessments for complex initiatives, critical business processes, control environments, and emerging technologies, including cloud and artificial intelligence use cases.
  • Define and improve risk assessment approaches, methodologies, standards, and supporting tools to promote consistent identification, analysis, documentation, and treatment of risk.
  • Apply qualitative and quantitative analysis, including probability, impact, and scenario-based methods, to clarify exposure, compare response options, and support risk-informed decisions.
  • Evaluate the design and effectiveness of cybersecurity controls and technologies, identify material gaps or systemic themes, and recommend proportionate mitigation, acceptance, transfer, or avoidance strategies.
• Strategic guidance and cross-functional influence:
  • Serve as a strategic advisor to technology, cybersecurity, and business partners on risk, governance, control, and operational implications.
  • Translate complex technical risk into concise business impact, options, trade-offs, and recommendations for leaders and non-technical audiences through briefings, presentations, whitepapers, and position papers.
  • Lead workshops and team member discussions that establish shared understanding, resolve ambiguity, and drive alignment on risk ownership, treatment decisions, priority, and resource needs.
  • Integrate risk considerations into the lifecycle of technology projects, capabilities, and business initiatives, translating technical risk into business impact and supporting informed decision-making aligned with organizational objectives.
• Capability and program development:
  • Lead risk framework, reporting, tooling, capability-building, and maturity improvement efforts that span cybersecurity domains and functions.
  • Identify trends and interdependencies across risks, controls, technologies, and business operations; communicate implications and recommend program-level improvements.
  • Mentor analysts and risk professionals, share advanced analytical practices, and strengthen consistent application of cybersecurity risk management methods.
  • Maintain awareness of emerging threats, evolving technologies, regulatory requirements, and industry trends, using these insights to strengthen and enhance cybersecurity risk advisory capabilities.

Qualifications

• 8-10 years of progressive experience in cybersecurity, technology risk management, IT operations, IT audit, governance, compliance, or related technical fields.
• Demonstrated experience leading complex analyses or cross-functional initiatives, advising stakeholders on risk and control implications, and delivering major work products with a high degree of autonomy.
• Experience applying cybersecurity risk management methodologies, control frameworks, governance models, and supporting tools in an enterprise environment.
• Bachelor's degree in Cybersecurity, Information Systems, Computer Science, Information Technology, or a related field; or equivalent practical experience may be considered in place of a bachelor's degree.

Requirements

• Recognized domain expertise in cybersecurity risk management, governance, control assessment, risk response, and capability or maturity models.
• Thorough knowledge of cybersecurity standards and frameworks such as NIST, ISO 27001, and CIS Controls, with the ability to advise on practical application.
• Broad understanding of cybersecurity domains and the technologies they protect, including cloud services, networks and infrastructure, applications, data, identity, databases, protocols, security tools, and emerging technologies.
• Exceptional problem analysis in complex, ambiguous, or novel scenarios.
• Exceptional understanding of measurement, probability, statistics, metrics, and quantitative risk concepts, including cyber risk quantification.
• Identifies and assesses business and technology challenges, performs root cause analysis, recommends risk-informed technology solutions, and drives implementation to support organizational objectives and mitigate risk.
• Connects cybersecurity and technology risk to business services, processes, strategic objectives, and industry context.
• Operates with a high degree of autonomy on complex initiatives, providing direction for high-impact work, leading cross-functional efforts, and mentoring team members.
• Actively shapes company culture (e.g., supporting employee resource groups, mentoring employees, volunteering).
• Champions cultural norms (e.g., willing to have cameras when it matters).
• Demonstrates a company ownership mindset.
• Travels as needed for role, including divisional/team meetings and other in-person meetings.
• Fulfills business needs, which may include investing extra time, helping other teams, etc.

Benefits

• Recognition: Total compensation package, annual bonus eligibility for most roles, 401(k) with a company match.
• Career Growth: Opportunities for growth with leaders and mentors partnering with employees.
• Flexible Workplace: Remote-first culture with flexibility to work from various locations.
• Inclusion and Belonging: An inclusive workplace fostering an environment where people feel valued and heard.
• Sustainability: Actions to build resilient communities and reduce environmental impact.