Senior Cybersecurity Analyst

Assurant•Atlanta, GA

About The Position

The Senior Cybersecurity Analyst safeguards Assurant’s digital assets and infrastructure by leading complex cybersecurity initiatives, providing strategic guidance on risk mitigation, and ensuring compliance with global regulatory frameworks. The role requires technical expertise, cross-functional collaboration, and the ability to influence and mentor others. The analyst leads end-to-end SOC audit programs, including audit planning, stakeholder coordination, walkthroughs, testing support, and issue resolution. As the primary liaison between external auditors and internal teams, the role provides technical and compliance expertise to strengthen IT controls, support audit readiness, and help ensure successful audit outcomes.

Requirements

Bachelor’s degree in computer science, information security, or a related field.
At least 5 years of cybersecurity experience, including demonstrated experience in incident response, compliance, IAM, and security architecture.
Deep understanding of cybersecurity frameworks and regulatory requirements, including domestic and international compliance.
Strong experience with ITGCs, IT control testing, and auditing.
Familiarity with audit procedures and evidence collection.
Proficiency with security technologies such as firewalls, SIEM, and endpoint protection.
Excellent communication and documentation abilities, including adapting communication to different organizational levels.
Ability to understand requests or tasks deeply and suggest ways to streamline them.
Ability to build and maintain strong working relationships with sponsors, stakeholders, and team members.
Strong problem-solving, critical-thinking, and troubleshooting skills.
Proven ability to influence others and drive action across functions and levels without direct authority.
Ability to work independently and collaboratively in a virtual team environment.
Strong organizational skills and ability to break large tasks into manageable actions, manage them effectively, and deliver on time.
Ability to prioritize work that adds the most value, engage the right people at the right time, and demonstrate determination to get things done.

Nice To Haves

Advanced certifications are preferred.
An active security certification or equivalent, such as CompTIA Security+, GIAC Security Essentials, ECSA, CEH, CRTO, OSCP, or CISSP.
Experience in financial services or insurance industries.
Knowledge of cloud security and modern IAM solutions.
Experience with GRC platforms, including ServiceNow GRC, and risk management methodologies.
Experience with audit management tools.
Familiarity with DevSecOps and secure SDLC practices.
Knowledge of data privacy regulations such as GDPR and CCPA.

Responsibilities

Lead implementation and continuous improvement of cybersecurity policies, standards, and frameworks, ensuring alignment with regulatory requirements such as PCI-DSS, NY DFS, GLBA, SOX, and DORA.
Act as a subject matter expert in audits and assessments and lead end-to-end SOC audit programs, including planning, stakeholder coordination, walkthroughs, testing support, and issue resolution.
Serve as the primary liaison between external auditors and internal teams, supporting audit readiness and successful audit outcomes.
Manage and optimize cybersecurity tools and platforms, such as GRC, SIEM, endpoint protection, and vulnerability scanners.
Respond to security incidents and alerts, perform root cause analysis, and recommend remediation.
Lead security-related projects and initiatives.
Conduct advanced risk assessments for new technologies and vendors; provide input on security, architecture, and design.
Provide oversight and guidance on the design of technical cybersecurity controls to mitigate risks.
Develop and maintain dashboards and reports on security posture, compliance status, project and task status, and audit findings.
Present findings to leadership and stakeholders and translate technical risk into business impact.
Provide guidance and mentorship to junior team members and foster continuous learning and collaboration within the cybersecurity team.