Senior Cybersecurity Engineer - BISO / Risk Management

Pay Philosophy

The typical starting salary range for this role is determined by a number of factors including skills, experience, education, certifications and location. The full salary range for this role reflects the competitive labor market value for all employees in these positions across the national market and provides an opportunity to progress as employees grow and develop within the role. Some roles at Liberty Mutual have a corresponding compensation plan which may include commission and/or bonus earnings at rates that vary based on multiple factors set forth in the compensation plan for the role.

Description

We deliver our customers peace of mind every day by helping them protect what they value most. Our passion for placing the customer at the center of everything we do is driving a transformational shift at Liberty Mutual. Operating as a tech startup within a Fortune 100 company, we are leading a digital disruption that will redefine how people experience insurance. Come be part of our BISO community!

 

This role has a hybrid work schedule ( 2 days onsite) and we will only consider candidates based in Portsmouth, NH, Boston, MA, Plano, TX, Indianapolis, IN and Columbus, OH.

 

Job introduction:

The Liberty Mutual Global Cybersecurity organization is seeking a Senior Cybersecurity Engineer - BISO / Risk Management candidate who will be focused on proactively identifying, consulting and managing cybersecurity risks to join our Business Information Security (BISO) community aligned to support the Global Digital Services (GDS) organization. As a modern infrastructure and operations organization, GDS leads and enables Liberty’s technology direction, supporting business needs to operate remotely and collaborate globally. They are responsible for core enterprise infrastructure systems and emphasize process efficiency, automation, resiliency, and platform standardization on a global scale.

As a Sr. Cybersecurity member of our BISO community, your role acts as a bi-directional partner to GDS creating alignment between GDS objectives and the enterprise cybersecurity strategy. The Sr. Cybersecurity Engineer ensures business decisions adhere to corporate cybersecurity policies and standards and are implemented with security top of mind, while being mindful to the practicalities of speed, agility, and business results. Based on business unit strategic security needs, the Sr. Cybersecurity Engineer will be a key partner in helping solution approaches to remediate or mitigate cybersecurity risks working alongside other BISO community team members. About the job:

• Utilize cyber risk quantification methodologies such as FAIR to improve clarity around cyber risk and improve executive decision making through partnership with our GCS Governance, Risk & Compliance (GRC) organization.
• Provide technical consultation across a wide variety of technical cybersecurity domains such as Secure DevOps, Identity & Access Management, Threat & Vulnerability Management, Data Protection, Cloud Security, Network and Cloud Environment.
• Assist in the execution of GDS targeted cybersecurity assessments to proactive identify risk within key strategic initiatives and operational environments.
• Support Threat Modeling reviews discussions with engineers, architects, product owners or leaders.
• Govern, analyze and report to senior leadership trends, themes and risk reduction opportunities identified via Issues management processes specific to GDS.
• Understand the GDS provided products, capabilities and service delivery processes to analyze and prepare technical recommendations to address identified risks.

Qualifications

• Bachelor or Master`s degree in technical discipline or equivalent experience.
• Minimum 5+ years of experience in Cyber Risk Management frameworks and cyber risk management principles and the ability to apply these frameworks to identify, assess, and mitigate technology and cybersecurity risks.
• Proficient in new and emerging technology concepts, strategies, and methodologies, as well as security aspects of cloud service providers, identity management, operating systems, software, communications, and network protocols.
• Excellent communication (written and verbal) to collaborate with cross-functional teams and stakeholders to prioritize remediation activities, mitigations and maturity investments.
• Advanced consultative skills, including the ability to understand and assist with technology plan development.
• Industry cybersecurity and/or technology certifications such as CRISC, CISM, CISSP are a plus.

 

About Us

As a purpose-driven organization, Liberty Mutual is committed to fostering an environment where employees fr