Intermediate Cyber Security Advisor to advise technical and business teams on the implementation of security requirements within the insurance industry.

Our client is seeking an Intermediate Cyber Security Advisor to advise technical and business teams on the implementation of security requirements within the insurance industry.

Must Haves:

• 8+ years of experience in the IT industry with 3+ years of working knowledge of cyber security as a security liaison/advisor on enterprise-level projects. 
• Experience with Secure by Design Principles, policy and procedures. 
• Ability to build relationships and use facilitation skills with both technical and non-technical stakeholders.
• Experience with M365 and other cloud technologies and platforms.
• Knowledge of industry standard of technical security controls and frameworks.

Nice to haves:

• Possession of / or working towards industry related certifications such as CISSP, CCSP and/or CISM
• Possession of industry related certifications
• Experience leading projects or initiatives

Overview

The Cyber Security Advisor role contributes to the clients success by advising technical and business teams on the implementation of security requirements to protect data and maintain & strengthen the organizational risk posture.   

Responsibilities:

• Provides advisory support to Insurance and Technology groups by ensuring alignment with Security standards and policies with a focus on implementation of controls in applications, data, cloud platforms, systems, networks and end-point solutions.
• Consults broadly with both Technology and Business teams to guide and influence implementation of security in technology decisions and initiatives.
• Leads the design and creation of security guidelines, design patterns, standards, and best practices for use by Insurance and Technology teams.
• Provides a security advisory service with respect to policies, standards, procedures, and major industry regulations for the client’s applications.
• Provides peer mentorship and guidance within the information security team. 
• Foster and promote security culture amongst all Insurance and Technology stakeholders.
• Research and understand emerging technologies and concepts in the industry.