Senior Cybersecurity Specialist

Liberty Mutual Insurance•Boston, MA

2d•Hybrid

About The Position

We deliver our customers peace of mind every day by helping them protect what they value most. Our passion for placing the customer at the center of everything we do is driving a transformational shift at Liberty Mutual. Operating as a tech startup within a Fortune 100 company, we are leading a digital disruption that will redefine how people experience insurance. At Liberty, you'll thrive in a hybrid setting that fosters in-person collaboration, innovation and growth. This approach optimizes both remote and in-person interactions, enabling you to connect and ideate with your team and deepen valuable relationships across the company, while still enjoying the flexibility of remote work for focused tasks and projects. This role has a hybrid work schedule (2 days onsite) and we are considering candidates based in Portsmouth, NH, Boston, MA, Plano, TX, Indianapolis, IN and Columbus, OH. Job Introduction: The Business Process and Governance team within the Global Cybersecurity Identity & Access Management (IAM) is actively seeking a Senior Cybersecurity Specialist with a strong background in IAM, business process, compliance, and governance. This position, under limited supervision and general direction, will assist the Practice Area Leads (PALs team-aligned Governance leads for each practice area in IAM) in ensuring that IAM processes and controls are effective, efficient, and compliant with industry best practices, Liberty Mutual Cybersecurity Policies & Standards, and selected authoritative sources.

Requirements

Bachelor`s or Master`s degree in technical discipline or equivalent experience.
Minimum 5+ years of Cybersecurity experience with 2-3 years focus in IAM Governance, and process development.
Working knowledge of Agile development methodologies, IAM, Cybersecurity Governance, and/or business process engineering.
Familiarity with governance and control frameworks (COBIT, ISO 27001, NIST CSF/SP 800-53) and translating them into controls.
Demonstrated experience mapping and assessing end-to-end business processes, designing controls, and implementing governance artifacts.
While not required to hire, any candidate must be willing and able to work towards obtaining a cybersecurity professional certification within the first year of employment (CISA, CISM, CRISC).
In-depth knowledge of IT concepts, strategies, and methodologies, and their application to business opportunities.
In-depth knowledge of agile methodologies, project management, and IT standards and guidelines.
Strong written and verbal communication with experience preparing executive-level governance reports and working with process and control owners.
Experience producing actionable, technology-enabled recommendations and prioritizing remediation across a single business process.
Advanced negotiation, facilitation, and consensus-building skills.
Advanced oral and written communication skills; strong presentation skills.
Able to make difficult and quick decisions daily with limited supervision and often with competing priorities and varying degrees of urgency.
Able to influence a diverse group of stakeholders at various levels in the organization.

Nice To Haves

Experience with IAM / Modern Authentication / Public Cloud tooling is a plus (e.g., MFA, Security Token, OAUTH, Azure AD conditional access, Azure, AWS, and SailPoint IIQ)

Responsibilities

Conduct value-stream mapping sessions (VSMs) to document the current and future state of IAM processes as a tool to identify waste, reduce process cycle times, and implement process improvement with a focus on Governance.
Assist PALs in mapping IAM Governance standards, processes, and control procedures to current and future state VSMs to identify gaps and/or areas for improvement.
Interview IAM subject matter experts (SMEs) and Control Owners to document and publish IAM processes and control procedures that align to IAM-owned Cybersecurity Standards.
Assist PALs in raising self-identified gaps/findings against processes that are not in compliance with established best practices, LM policies and standards, and/or selected authoritative sources.
Contribute to Governance decision-making in determining go-forward solutions and guidance for IAM products, services, and processes.
Execute compliance testing of in-scope database and operating system privileged access to determine candidates for user access reviews and work with Agents of Shield (AoS) to kick off UAR campaigns within a defined timeframe.
Complete data analysis activities through the use of Excel, PowerShell, VBA, Python, and/or LibertyGPT.
Develop and distribute IAM communications requests to a defined audience using communications templates and best practices.
Complete daily business as usual (BAU) tasks with a focus on maintaining security posture.
Participate in Agile ceremonies, including but not limited to daily stand-ups, planning, backlog refinement, retrospectives, team norms, and sprint demonstrations.