Senior Cybersecurity Analyst

Assurant•Atlanta, GA

1d•$88,000 - $147,000

About The Position

The Senior Cybersecurity Analyst safeguards Assurant’s digital assets and infrastructure by leading complex cybersecurity initiatives, providing strategic guidance on risk mitigation, and ensuring alignment with global regulatory frameworks. The role calls for deep technical expertise, cross-functional collaboration, and the ability to influence and mentor others. The analyst leads end-to-end SOC audit programs, including audit planning, stakeholder coordination, walkthroughs, testing support, and issue resolution. As the primary liaison between external auditors and internal teams, the role provides technical and compliance expertise to strengthen IT controls, support audit readiness, and promote successful audit outcomes. The position also leads cybersecurity governance and compliance activities, manages security technologies, supports incident response, conducts risk assessments, develops security reporting, and mentors junior team members.

Requirements

Bachelor’s degree in computer science, Information Security, or a related field.
At least 5 years of cybersecurity experience, with demonstrated experience in incident response, compliance, IAM, and security architecture.
Deep understanding of cybersecurity frameworks and regulatory requirements.
Strong experience with ITGCs, IT control testing, and auditing.
High-level understanding of domestic and international regulatory compliance.
Familiarity with audit procedures and evidence collection.
Proficiency in security technologies such as firewalls, SIEM, and endpoint protection.
Excellent communication and documentation abilities, with the ability to communicate appropriately across organizational levels.
Ability to understand requests and tasks deeply and suggest ways to streamline them.
Ability to build and maintain strong working relationships with sponsors, stakeholders, and team members.
Strong problem-solving, critical-thinking, and troubleshooting skills.
Ability to influence others and drive action across functions and levels without direct authority.
Ability to work independently and collaboratively in a virtual team environment.
Strong organizational skills, including breaking large tasks into manageable, decoupled actions and delivering them on time.
Ability to prioritize high-value work, engage the right people at the right time, and show determination to get things done.

Nice To Haves

Advanced certifications.
Experience with GRC platforms such as ServiceNow GRC or other audit management tools.
An active security certification or equivalent.
CompTIA Security+.
GIAC Security Essentials.
Certified Security Analyst (ECSA).
Certified Ethical Hacker (CEH).
Certified Red Team Operator (CRTO).
Offensive Security Certified Professional (OSCP).
Certified Information Systems Security Professional (CISSP).
Experience in financial services or insurance industries.
Knowledge of cloud security and modern IAM solutions.
Experience with GRC platforms and risk management methodologies.
Familiarity with DevSecOps and secure SDLC practices.
Knowledge of data privacy regulations such as GDPR and CCPA.

Responsibilities

Lead implementation and continuous improvement of cybersecurity policies, standards, and frameworks, ensuring alignment with regulatory requirements such as PCI-DSS, NY DFS, GLBA, SOX, and DORA.
Serve as a subject matter expert in audits and assessments, and lead end-to-end SOC audit programs including planning, stakeholder coordination, walkthroughs, testing support, and issue resolution.
Act as the primary liaison between external auditors and internal teams, providing technical and compliance expertise to strengthen IT controls and audit readiness.
Manage and optimize cybersecurity tools and platforms, including GRC, SIEM, endpoint protection, and vulnerability scanners.
Respond to security incidents and alerts, perform root cause analysis, and recommend remediation.
Lead security-related projects and initiatives.
Conduct advanced risk assessments for new technologies and vendors.
Provide input on security architecture and design, and guide the design of technical cybersecurity controls to mitigate risks.
Develop and maintain dashboards and reports covering security posture, compliance status, project and task status, and audit findings.
Present findings to leadership and stakeholders, translating technical risk into business impact.
Guide and mentor junior team members and foster continuous learning and collaboration within the cybersecurity team.