Zscaler Engineer developing and supporting Zscaler environment, enhancing cybersecurity measures at HP. Collaborating across teams to improve data loss prevention and network security practices.
About the role
- Cybersecurity Governance Analyst supporting Aviva's Cybersecurity program. Leading compliance activities and stakeholder collaboration in a fast-paced environment.
Responsibilities
- Be the subject matter expert at a high level and respond to client/regulatory requests regarding Aviva’s Cybersecurity program.
- Develop and enhance Key Risk Indicators and Key Performance Indicators in support of cybersecurity risk management initiatives and executive reporting.
- Perform annual cybersecurity controls reviews and manage issues and actions for the Cybersecurity department.
- Perform periodic NIST CSF self-assessments and support the development and implementation of remediation activities to resolve control deficiencies.
- Support compliance with industry frameworks and standards such as PCI-DSS and ISO27001.
- Work with the security education team to facilitate the execution and reporting for the phishing program and manage security awareness training assignments for our colleagues.
- Generate and review content regularly for our Security Education and Awareness program.
- Coordinate and lead cybersecurity awareness campaigns.
- Review and update Security Policies annually, as well as draft new policies and standards where required.
- Manage Aviva’s GRC solution overall and implement enhancements for Cybersecurity Governance workflow.
- Ensure timely completion of assigned tasks and reporting schedules.
- Promote effective security practices, technologies, and processes with stakeholder groups.
- Address requests from IT and business users on security related matters and take ownership of the same to conclusion and satisfaction.
Requirements
- 3-5 years of experience in cybersecurity governance programs and processes, risk management and reporting.
- Good knowledge of cybersecurity and technology concepts.
- Knowledge and practical experience in applying security standards and frameworks (e.g. NIST, ISF, ISO, PCI DSS).
- Strong written and verbal communication skills; ability to communicate cybersecurity and risk-related concepts to technical and non-technical audiences at various levels.
- Demonstrated ability to establish effective working relationships and collaborative work approaches with both internal and external contacts.
- Strong attention to detail and problem-solving skills.
- Experience with using GRC platforms and data platforms (e.g. Archer, IBM OpenPages, Qlik).
- Good understanding of the insurance or banking industries.
- University degree or college diploma in Computer Science, Information Security Management, Cybersecurity Risk Management, or equivalent professional experience within Cybersecurity.
- Professional designation relating to cybersecurity or IT risk (e.g. CISSP, CISA, CISM, CCSP/CCSK, GIAC, CompTIA Security+) is an asset.
Benefits
- Compelling rewards package including base compensation, eligibility for annual bonus, retirement savings, share plan, health benefits, personal wellness, and volunteer opportunities.
- Outstanding Career Development opportunities.
- We’ll support your professional development education.
- Competitive vacation package with the option to purchase 5 extra days off per year.
- Employee driven programs focused on gender, LGBTQ+, origins, diversity, and inclusion.
- Corporate wellness programs to support our employees’ physical and mental health.
- Hybrid flexible work model.
Job title
Job type
Experience level
Salary
Not specified
Degree requirement
Tech skills
Location requirements
Senior Software Engineer in Information Security at Walmart. Driving data - related solutions while ensuring security and compliance across applications.
Assistant Security Manager overseeing daily security operations and supervising team at WarHorse Gaming Omaha. Provides leadership and compliance ensuring a safe environment for guests and staff.
Senior IT - Security Engineer in charge of technical security concepts and architecture decisions. Collaborating with IT operations and engineering to ensure secure systems.
Software Engineer focusing on security features for AI systems at Cohere, contributing to production security and secure coding practices.
Senior IT - Security Engineer in IT - Security team designing and optimizing security concepts for payment processing company. Collaborating with IT engineering and operations teams on security implementations.
Director of ERP Security and Controls responsible for Oracle Fusion ERP Security architecture and compliance. Lead security and control strategies in a hybrid work setting at Labcorp.
Senior Security Engineer supporting end - to - end security architecture and compliance for healthcare AI startup. Designing Azure security solutions and partnering with engineering teams for integrated security throughout SDLC.
CSO/ACSO responsible for managing facility’s SCI security program. Join HII’s Mission Technologies division focusing on cybersecurity and mission IT.
Embedded Systems Security Engineer developing and coordinating anti - tamper solutions for defense projects at HII's Mission Technologies division. Working closely with DoD and US Air Force teams to ensure security efficacy.