潘金莲传媒映画

Allstate

Cyber Risk Assessment Lead Consultant (Remote - Home Based Worker)

Posted on Oct 5 Remote, IL 5 views

At Allstate, great things happen when our people work together to protect families and their belongings from life鈥檚 uncertainties. And for more than 90 years our innovative drive has kept us a step ahead of our customers鈥 evolving needs. From advocating for seat belts, air bags and graduated driving laws, to being an industry leader in pricing sophistication, telematics, and, more recently, device and identity protection.听

Job Description

The Cyber Risk Assessment Lead is part of Governance, Risk, & Compliance (GRC) within Allstate Information Security. This role will be a subject matter expert within our Cyber Risk Assessment Team and will drive maturity and growth in our cyber risk assessment program and methodology to ensure accurate reporting of residual risk to stakeholders, driving informed, risk based decisioning. This includes benchmarking of our processes, identification and design of enhancements, and implementation of innovative process changes to drive simplification, affordability, and connectivity/synergy across risk services within Allstate Information Security and across the enterprise.

The Cyber Risk Assessment Lead will collaborate across business and security teams within the Allstate enterprise and Family of Companies to identify, assess, and mature capabilities to report residual risk of cyber related controls.听 This role will also collaborate with security process owners to drive optimization of our cyber risk analysis services and provide accuracy in residual risk reporting to business level leaders and our Board of Directors.听 In this highly visible role, there will be exposure to varying levels of leadership across the enterprise and family of companies.听 A broad range of professional skills along with strong interpersonal and communications skills will be required for problem-solving, objective based decisioning, and collaboration with virtual cross-functional work groups.听 This individual serves as a subject matter expert and trusted advisor who can clearly articulate Allstate security policies, standards, control requirements, and risk to both technical and business audiences alike.听

Key Responsibilities



  • Lead design an approach to ensure transparent reporting of risk impacts to technical assets and business operations to support leadership in risk-based security decisions



  • Drive strategic maturity and innovation within the cyber risk assessment program to drive simple, affordable, connected solutions that reduce assessment fatigue and drive informative, effective assessments



  • Execute on agreed upon methodology to identify, assess, and report on cyber risk in Board level



  • Challenge status quo to drive maturity, effectiveness, and accuracy within and across our cyber risk services



  • Recommend operationally feasible and cost-effective solutions to reduce risk, as appropriate



  • Drive automation within workflows and residual risk methodology to drive resource efficiency and self-service capabilities



  • Drive sound cyber risk reporting and accountability across Allstate business units and family of companies



  • Help our partners proactively maintain a strong cybersecurity preparedness and response posture



  • Drive key stakeholder education to support continued engagement and awareness of program requirements



  • Help facilitate review of changes in company processes, standards, and technology to ensure alignment to cyber risk evaluation processes and reporting



  • Build effective working relationships, make sound decisions, successfully implement changes, initiate action, and achieve results as a trusted advisor



Job Qualifications


  • 7+ years of Information Security/IT risk assessment or consulting experience



  • Relevant security/computer science education and/or industry standard certifications preferred (i.e., CRISC, CISM, CISA, CISSP, CompTIA, SANS Institute/GIAC)



  • Strong analytical and organizational skills with ability to effectively manage multiple, competing projects/priorities while achieving targeted completion results



  • Effective written and verbal communication skills with ability to tailor communication style to audience at hand



  • Ability to effectively work with technical and non-technical resources, which includes partnership with multiple business groups, managers, network/security architects, and engineers



  • Take complete ownership over assigned objectives and work independently in a "semi-structured" environment, while recognizing when guidance is needed from program management and senior leaders



  • Ability to write quality documentation and/or presentations is a must



  • Ability to work across organizational boundaries and levels is a must



  • Proficiency in MS Office Pro Suite and SharePoint



  • Ability to stay up to date with current cybersecurity threat landscape and maintain technical proficiency via self or formal training



  • Good understanding of IT security best practices by applying depth and breadth of expertise in multiple domains and security disciplines



  • Working knowledge of: PCI DSS 3.2, HIPAA applicable security / privacy controls, Sarbanes-Oxley (SOX) 404, ISO/IEC 27000 family of standards, NIST 800-53, NIST cybersecurity framework, and COBIT



  • General knowledge of common application security architecture and vulnerabilities (e.g., OWASP Top 10), attack techniques, and remediation tactics/strategies



  • General familiarity with common enterprise infrastructure (OS platforms, directory services, networking infrastructure, appliances, middleware, security infrastructure)





#LI-JJ1

Skills

Cybersecurity Controls, Cybersecurity Risk Assessment, Health 潘金莲传媒映画 Portability & Accountability Act (HIPAA), Information Security Policies, Information Technology (IT) Risk Management, Payment Card Industry Data Security Standard (PCI DSS), Sarbanes-Oxley Act (SOX), Stakeholder Management

Compensation

Compensation offered for this role is $95,700.00 - 170,925.00 annually and is based on experience and qualifications.

The candidate(s) offered this position will be required to submit to a background investigation.

Joining our team isn鈥檛 just a job 鈥 it鈥檚 an opportunity. One that takes your skills and pushes them to the next level. One that encourages you to challenge the status quo. And one where you can impact the future for the greater good. 听

You鈥檒l do all this in a flexible environment that embraces connection and belonging. And with the recognition of several inclusivity and diversity awards, we鈥檝e proven that Allstate empowers everyone to lead, drive change and give back where they work and live.听

Good Hands. Greater Together.

Allstate generally does not sponsor individuals for employment-based visas for this position.

Effective July 1, 2014, under Indiana House Enrolled Act (HEA) 1242, it is against public policy of the State of Indiana and a discriminatory practice for an employer to discriminate against a prospective employee on the basis of status as a veteran by refusing to employ an applicant on the basis that they are a veteran of the armed forces of the United States, a member of the Indiana National Guard or a member of a reserve component.

For jobs in San Francisco, please click 鈥溾 for information regarding the San Francisco Fair Chance Ordinance.
For jobs in Los Angeles, please click 鈥溾 for information regarding the Los Angeles Fair Chance Initiative for Hiring Ordinance.

To view the 鈥淓EO is the Law鈥 poster click 鈥溾. This poster provides information concerning the laws and procedures for filing complaints of violations of the laws with the Office of Federal Contract Compliance Programs

To view the FMLA poster, click 鈥溾. This poster summarizing the major provisions of the Family and Medical Leave Act (FMLA) and telling employees how to file a complaint.

It is the Company鈥檚 policy to employ the best qualified individuals available for all jobs. Therefore, any discriminatory action taken on account of an employee鈥檚 ancestry, age, color, disability, genetic information, gender, gender identity, gender expression, sexual and reproductive health decision, marital status, medical condition, military or veteran status, national origin, race (include traits historically associated with race, including, but not limited to, hair texture and protective hairstyles), religion (including religious dress), sex, or sexual orientation that adversely affects an employee's terms or conditions of employment is prohibited. This policy applies to all aspects of the employment relationship, including, but not limited to, hiring, training, salary administration, promotion, job assignment, benefits, discipline, and separation of employment.

More From Allstate

Claims Resolution Adjuster - Remote

Posted on Sep 25 Remote, IL 635 Views

Property Damage Services Support Assoc III

Posted on Sep 23 Saddle Brook, NJ 632 Views

Trial Attorney (Remote - Orlando, FL)

Posted on Aug 30 Florida, FL 589 Views

Trial Attorney (Remote - Glendale, CA)

Posted on Aug 30 Glendale, CA 714 Views

Catastrophe Inside Adjuster Analyst II (Remote - USA)

Posted on Sep 29 Illinois, IL 615 Views

Related Job Listings

Allstate

Trial Attorney (Remote - Orlando, FL)

Posted on Aug 30 Florida, FL 589 Views

Allstate

Trial Attorney (Remote - Glendale, CA)

Posted on Aug 30 Glendale, CA 714 Views

Allstate

Legal Administrative Assistant- HYBRID (Nashville, TN)

Posted on Oct 9 Nashville, TN 154 Views

Allstate

Sr. Trial Attorney (HYBRID- Shreveport, Louisiana)

Posted on Sep 24 Louisiana, LA 82 Views

Allstate

Cyber Risk Services Lead Consultant

Posted on Sep 28 Remote, IL 49 Views