Primary Details

Time Type: Full time

Worker Type: Employee

The Opportunity:

The Global Cyber Security Governance Specialist supports QBE’s cyber security objectives by providing clear, data-driven insights into the performance of key controls and the organization’s overall security posture. The role is responsible for tracking and analyzing control metrics, surfacing risk signals, and contributing to reporting for governance forums, senior stakeholders, and regulatory engagements. 

In addition to core metrics and reporting responsibilities, the role plays a key part in QBE’s cyber scenario modelling program, supporting scenario definition, refinement, and alignment with threat intelligence and attack tree methodologies. The Specialist integrates modelling outputs into narrative reporting, helps ensure scenarios remain defensible and relevant, and contributes to structured scenario refresh cycles. The Specialist integrates modelling outputs into narrative reporting, helps ensure scenarios remain defensible and relevant, and contributes to structured scenario refresh cycles.

•        Location: Sun Prairie, WI - New York, NY - Chicago, IL - Atlanta, GA - Boston, MA -

•        Work Arrangement: hybrid working expectations

•        The starting salary for this role is between $133,500.00 and $251,000.00

 

Your new role

• Monitor and analyze cyber control performance metrics and key risk indicators (KRIs) to identify trends, emerging risks, and opportunities for control uplift.

• Develop and maintain reporting artefacts (e.g. dashboards, briefings, governance packs) that clearly communicate security posture and risk insights to a range of stakeholders, including senior management and governance forums.

• Translate complex control and risk data into actionable insights, enabling stakeholders to make informed trade-offs aligned with QBE’s risk appetite and strategic priorities.

• Support cyber scenario modelling activities, including scenario definition, refinement, and alignment with threat intelligence and attack tree structures. Ensure scenarios remain accurate, defensible, and relevant to QBE’s operating environment, drawing on established methods and practices referenced in stakeholder materials and scenario modelling roadmaps. This includes coordinating scenario refresh cycles, supporting capability assessment inputs, incorporating modelling outputs into reporting, and validating narrative‑to‑model alignment.

• Collaborate with control owners, delivery teams, and second-line functions to improve the quality, clarity, and consistency of control performance data and reporting inputs.

• Support the integration of control telemetry and other evidence-based measures into reporting processes, with a focus on control immutability and automation where feasible.

• Contribute to the continuous improvement of governance and reporting frameworks, ensuring alignment with QBE’s cyber strategy, regulatory obligations, and business needs.

• Participate in targeted, risk-informed assurance activities that validate control effectiveness in high-priority areas, complementing formal audits and RCSA processes.

• Act as a feedback channel to Strategy & Architecture and other stakeholders, highlighting implementation challenges or systemic issues surfaced through metrics or reporting.

• Engage stakeholders to support a culture of risk transparency and accountability, encouraging proactive issue identification and evidence-based dialogue.

• Support audit and regulatory engagement by ensuring reporting artefacts and supporting evidence are accurate, consistent, and audit-ready.

About you

• Ability to get deeply technical and apply that skill to the business environment.

• Exceptionally curious and enquiring mindset with an ability to be fast-paced and agile in meeting business needs.

• Strong communication, negotiation, and conflict management skills, with an ability to anticipate and flag potential obstacles.

• Experience with security and risk-based standards, Microsoft Excel, Power BI and ERC tools.

• Experienced in working across time zones and collaborating in a multi-location environment.

Compensation Package: The salary range for this role is provided above. This is the national range for location(s) listed. The salary offer will be decided based on the role's complexity, its location, and the candidate’s professional background, including their education and experience. Beyond the base salary, regular full-time and part-time employees will also be eligible for QBE’s annual discretio