Job Profile Specialist, Cyber Technology Risk Professional (Third-Party Cyber / AI)

If you’re passionate about innovation and love working in an environment where you can constantly improve and adopt new technologies to drive business results, then Nationwide’s Information Technology team could be the place for you! At Nationwide®, “on your side” goes beyond just words. Our customers are at the center of everything we do and we’re looking for associates who are passionate about delivering extraordinary care.

The Associate will serve as the primary point of contact for AI-related assessments within the Third-Party Cyber Risk (TPCR) team. This role is responsible for ensuring timely, comprehensive evaluations of AI components in third-party engagements, while also supporting broader TPCR assessment activities. The successful candidate will be detail-oriented, collaborative, and adept at engaging with diverse stakeholder groups, including Architecture, Third-Parties, Procurement, and internal Cybersecurity teams.

The Associate will be responsible for monitoring incoming requests and assessments involving AI, initiating appropriate workflows, and coordinating the completion of AI-specific cybersecurity questionnaires by third-party suppliers. They will ensure responses are received within defined service-level agreements (SLAs), review vendor submissions to identify gaps in AI-related controls and documentation, and escalate findings to relevant internal teams such as Architecture, Business Information Security Officers (BISOs), or Risk Owners. All findings will be documented and tracked to ensure visibility and resolution.

The ideal candidate will bring 2–4 years of experience in cybersecurity, risk management, or vendor risk assessment, along with familiarity with AI technologies and their associated risks. Proficiency with risk tracking tools, dashboards, and reporting platforms is also essential, as are strong organizational and communication skills to manage multiple priorities and stakeholders effectively.

This position is primarily hybrid, with flexibility for remote work depending on individual circumstances and business needs.

**This role does not qualify for employer-sponsored work authorization. Nationwide does not participate in the Stem OPT Extension program.**

#LI-TN1

Job Description Summary

If you’re enthusiastic about delivering secure technology solutions to support a company providing extraordinary care to its customers, then Nationwide Technology is the place for you. Nationwide's industry-leading technology workforce embraces an agile work environment and a collaborative culture to deliver outstanding solutions and results. If that sounds like something you aspire to, we want to hear from you!

As a Cyber Technology Risk Professional, you'll be entrusted to protect Nationwide. You'll identify issues and develop solutions for cyber security problems. You'll assess, report, and manage cyber risk through constant interaction with our technology and business partners. You'll gain an understanding of leading-edge technologies that play a key part in keeping Nationwide safe in our increasingly threatening world. You'll also help to build long-term relationships with potential Nationwide partners by providing up-to-date information on our Information Security Practices and thereby differentiating ourselves from our competitors by ensuring Nationwide is resilient in an ever-changing world and can meet, and exceed, its regulatory obligations while protecting our customers and business partners.

Job Description

Key Responsibilities:   

• Supports the improvement of the risk posture pertaining to confidentiality, availability, and integrity of assigned area by identifying, documenting, and communicating cyber risks. 

• Partners in the development and reporting of key risk metrics. 

• Responsible for applying secure software and systems engineering practices throughout the delivery lifecycle to ensure our data and technology solutions are protected from threats and vulnerabilities.

• Integrates technology risk practices to reduce business risk. 

• Partners to understand the current risk posture of portfolio and security priorities. Assists with communicating risk issue mitigation plans and ensuring risks are closed on time. 

• Compliance: Works with external regulators to respond to inquiries properly and accurately. Continuously matures compliance capabilities, providing expertise and execution against, the risk inherent in all compliance and regulatory matters. Collaborates with customers to respond to Request for Proposal (RFP), Request for Information (RFI), and Dilig