Compliance Analyst, Cyber Security

Crum & Forster • Morristown, NJ

1d • $121,500 - $140,700 • Onsite

About The Position

The Crum & Forster Cyber & Information Security team is seeking a Third-Party Security Analyst. Reporting to the Director of Cyber & Information Security, the analyst will perform third-party security assessments. You will work with a team of professional Security Analysts leveraging Next-Gen security tools to perform the full lifecycle of third-party reviews from onboarding to real-time monitoring of vendors and suppliers.

Requirements

• Bachelor's degree in a technical discipline or equivalent experience.
• 5-7 years of Cybersecurity related experience preferred.
• Previous experience performing technical security audits or third-party assessments.
• Understanding of current Cyber Vulnerabilities & threats.
• Knowledge of security assessments (SOC reports, ISO/NIST, vulnerability and pen testing assessments).
• Fundamental understanding of system and network security principles and technology.
• Ability to interface with a wide audience of technical and non-technical personnel.
• Ability to prioritize and manage workloads and deadlines.
• Excellent written and verbal communication skills.
• Self-starter who is motivated and driven to learn.

Nice To Haves

• Prior experience and/or certifications in AWS, Azure, and/or GCP.
• 5-7 years of Cybersecurity related experience preferred.
• Experience in performing third-party assessments of SaaS providers and vendors operating in cloud environments.
• Experience performing risk assessments.
• Any Security focused Certifications.

Responsibilities

• Conduct technical security assessments of third-party vendors, suppliers and partners by reviewing their security controls, adherence to regulations, compliance and contracts.
• Analyze third-party security assessment findings and document security risks within the management software for tracking of risk reporting.
• Coordinate with various stakeholders to verify and remediate security risk findings.
• Develop KRIs and KPIs around third-party risk assessments and the remediation of key findings.
• Develop, Update, and Publish Policies and Standard Operating Procedures for third-party risk management.
• Continuously monitor for active vulnerabilities and cyber events against our vendors and suppliers.
• Participate in third-party cyber incident response by reaching out to impacted vendors and tracking remediation.
• Be an ambassador for Cyber & Information Security within Crum & Forster.

Benefits

• Competitive compensation package
• Generous 401K employer match
• Employee Stock Purchase plan with employer matching
• Generous Paid Time Off
• Excellent benefits that go beyond health, dental & vision. Our programs are focused on your whole family’s wellness, including your physical, mental and financial wellbeing
• tuition reimbursement
• industry-related certifications
• professional training
• matching donation program
• volunteer opportunities
• employee-driven corporate giving program

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level