Assist with the execution and maintenance of the IT risk management program
Evaluate and mitigate information technology risks across the organization
Support internal and external IT risk assessments as dictated by the senior team members
Contribute to IT risk appetites, tolerances, and mitigation plans related to IT systems
Support monitoring activities of 1st line access reviews for general users, privileged users, and passwords
Coordinate with IT to maintain an IT risk register, control library, and assign risk ownership
Research industry trends, emerging threats, and evolving regulations
Contribute to training company stakeholders on IT risk
Contribute to Enterprise Risk Management team’s reporting and processes (e.g. key risks, watch list risks, AI Systems Program)

Requirements

Bachelor’s degree in information technology, cybersecurity, risk management, computer science, or related area
2-4 years of experience in IT risk management, IT audit, cybersecurity, or related roles
Familiarity with property/casualty insurance industry operations and relevant regulatory requirements (e.g. NAIC Model Law, PCI-DSS)
Foundational knowledge of Internal controls and core IT technologies and processes (e.g. network systems, operating systems, databases, change control tools and processes, computer systems operations, application and system development, help desk and incident monitoring, information security, data backup, retention and recovery, IT vendor management, asset management, disaster recovery)
Familiarity with risk assessment methodologies and GRC tools
Good written and verbal communication skills
Attention to detail with the ability to follow processes and standards
Proficiency in Microsoft Office products

Benefits

401k Match
Medical
Dental
Vision
PTO
Paid Holidays
Tuition Reimbursement

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

IT risk managementIT auditcybersecurityinternal controlsnetwork systemsoperating systemsdatabasesinformation securitydisaster recoveryrisk assessment methodologies

Soft Skills

communication skillsattention to detailprocess adherence