Junior Risk Analyst - Governance, Risk & Compliance (Audit) - CTH

Berkshire Hathaway • Walnut Creek, CA

250d • $84,360 - $105,650 • Remote

About The Position

Berkshire Hathaway Homestate Companies, Workers Compensation Division, has an immediate opening for a Junior Risk Analyst to join our IT Security Risk Management Team. This individual will assist the team in identifying, assessing, and mitigating risks related to the company's information security, physical security, and overall security posture. This entry-level role is ideal for candidates with a passion for security and risk management, offering opportunities to develop expertise in cybersecurity, threat analysis, and compliance.

Requirements

• Bachelor's degree in Information Security, Cybersecurity, Computer Science, Risk Management, or related field required.
• 1-3 years of experience in security risk management, cybersecurity, or related field, or combination of relevant internships, coursework, and relevant experience, required.
• CompTIA Security+, Certified Information Systems Security Professional (CISSP), and/or Certified in Risk and Information Systems Control (CRISC) a plus.

Nice To Haves

• Basic understanding of information security principles, including threat modeling, vulnerability management, and security controls.
• Knowledge of security frameworks and standards such as ISO 27001, NIST, or PCI DSS.
• Familiarity with cybersecurity tools and technologies, such as firewalls, intrusion detection systems, and encryption.
• Familiarity with security risk management software and tools.
• Strong analytical and problem-solving skills, particularly in a security context.
• Proficiency in Microsoft Excel and other data analysis tools.
• Excellent written and verbal communication skills, with the ability to present complex security issues clearly.
• Attention to detail and strong organizational skills.
• Ability to work independently and as part of a team.

Responsibilities

• Assist in conducting security risk assessments, including identifying potential vulnerabilities in IT systems, networks, and physical infrastructure.
• Support the evaluation of security controls and recommend improvements to mitigate identified risks.
• Participate in the development of risk profiles for different systems, applications, and facilities.
• Analyze security risks, incidents, and vulnerabilities to assess their potential impact on the organization.
• Assist in the preparation of reports on security trends and potential risks.
• Help ensure that the company's security practices comply with relevant regulations, standards, and internal policies.
• Support the development and implementation of security policies, procedures, and guidelines.
• Participate in internal audits and reviews to assess the effectiveness of security controls.
• Assist in the investigation and response to security incidents, including data breaches, unauthorized access, and physical security breaches.
• Document incident findings and support the development of remediation plans.
• Participate in post-incident reviews to identify lessons learned and improve incident response procedures.
• Contribute to the development and delivery of security awareness training for employees.
• Assist in creating educational materials to promote a security-conscious culture within the organization.

Benefits

• Paid Time Off
• Paid Holidays
• Retirement Savings Match
• Group Health Insurance (Medical, Dental, and Vision)
• Life and AD&D Insurance
• Long Term Disability Insurance
• Accident and Critical Illness Insurance
• Flexible Savings Accounts
• Paid Community Volunteer Day
• Employee Assistance Program
• Tuition Reimbursement Program
• Employee Referral Program
• Diversity, Equity and Inclusion Program

What This Job Offers

• Job Type: Full-time
• Career Level: Entry Level
• Industry: Insurance Carriers and Related Activities
• Education Level: Bachelor's degree