Cyber Risk Assurance Senior Advisor

Cigna Healthcare•Tennessee Work at Home, TN

About The Position

The Cyber Risk Assurance Senior Advisor will lead cybersecurity assessments and assurance activities across The Cigna Group’s business and technology environments. The role partners with business, technology, and cybersecurity leaders to evaluate controls, identify risk themes and opportunities to improve cyber maturity, and turn complex findings into practical recommendations. The position also supports informed risk decisions, mentors team members, and contributes to stronger assessment methods and reporting practices. The role spans cloud, hybrid, and on-premises environments and applies recognized cybersecurity frameworks and regulatory requirements. The position requires strong analytical, communication, facilitation, presentation, and relationship-building skills, along with the ability to lead multiple assessments and deliver quality results on time. Candidates must have at least five years of relevant experience and an industry cybersecurity or risk certification. A related bachelor’s degree or equivalent professional experience is preferred. For employees working from home occasionally or permanently, the internet connection must be through cable broadband or fiber optic service with speeds of at least 10 Mbps download and 5 Mbps upload.

Requirements

At least 5 years of experience in cybersecurity, information security, IT audit, technology risk management, compliance, consulting, or a related field.
Experience leading cybersecurity assessments, audits, compliance reviews, maturity assessments, or assurance activities.
Experience evaluating cybersecurity controls against one or more recognized frameworks, such as NIST CSF, NIST SP 800-53, HITRUST, ISO 27001/27002, or HIPAA.
Experience working with cloud, hybrid, and/or on-premises technology environments.
Strong analytical and problem-solving skills, including the ability to identify risk themes and recommend practical solutions.
Strong written, verbal, facilitation, and presentation skills, including the ability to explain complex technical concepts to technical and non-technical audiences.
Ability to build relationships and influence stakeholders across functions and organizational levels.
Industry certification such as CISSP, CISA, CISM, CRISC, Security+, SSCP, GSEC, or a similar cybersecurity or risk certification.

Nice To Haves

Experience conducting cybersecurity maturity assessments.
Experience working in healthcare, financial services, consulting, or another regulated industry.
Experience presenting cybersecurity findings, risk themes, and recommendations to senior leadership.
Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field, or equivalent professional experience.

Responsibilities

Lead cybersecurity maturity assessments, compliance reviews, control evaluations, and other risk assurance activities across business and technology environments.
Define and challenge assessment scope, objectives, assumptions, testing approaches, and control applicability.
Lead stakeholder interviews, walkthroughs, workshops, and evidence reviews to assess control design and effectiveness.
Evaluate cybersecurity controls across cloud, hybrid, and on-premises environments using frameworks and requirements such as NIST CSF, NIST SP 800-53, HITRUST, ISO 27001/27002, and the HIPAA Security Rule.
Analyze results to identify control weaknesses, root causes, systemic issues, emerging risks, and opportunities to improve cyber maturity.
Translate assessment findings into clear observations, maturity ratings, executive summaries, and practical recommendations.
Present risk themes, findings, and recommendations to technical teams, business partners, and senior leaders.
Partner with business, technology, and cybersecurity teams to support informed risk decisions and sustainable improvements.
Mentor team members and strengthen assessment methods, reporting practices, and team standards.
Stay current on cybersecurity threats, regulatory expectations, industry frameworks, and emerging technologies.
Lead multiple assessments and priorities while maintaining quality and delivering results on time.