Senior Technical Security Advisor

About UsResilience is the next-generation cyber risk company that’s on a mission to help make the world cyber resilient. 
Founded in 2016 by experts from across the highest tiers of the US military and intelligence communities, augmented by prominent leaders and innovators from the insurance and technology industries, the privately-held firm is rewriting the rules of how cyber risk is assessed and managed for middle to large market enterprises. Rooted in decades of experience, Resilience helps financial, risk, and information security leaders continuously improve their organizations' cyber resilience by connecting cyber insurance coverage with advanced cybersecurity visibility and a shared plan to reinforce actionable cyber hygiene. 
Resilience is proud to be backed by leading technology investment firms including General Catalyst, Lightspeed Venture Partners, Intact Ventures, Founders Fund, CRV, and Shield Capital. With headquarters in San Francisco, Resilience’s team is globally dispersed, with offices in New York, Chicago, Baltimore, Toronto, and London. Resilience offers insurance coverage through its licensed and appointed insurance agency and security services through its expert security team.  

Resilience is seeking a Senior Technical Security Advisor in North America to provide expert advice and analysis as part of its comprehensive cyber risk solution. This position is focused on management consulting and strategy, rather than implementation. Utilizing Resilience’s cutting-edge risk visibility and prioritization SaaS solution, you will collaborate with customers to develop strategies that boost their defense against cyber threats. Your role involves working closely with clients’ security, risk, and finance teams to convert security challenges into manageable risks, offering recommendations, and guiding clients towards making risk/security decisions that are financially prioritized as part of Resilience’s Human-in-the-Loop capabilities.
Resilience operates in a dynamic, high-growth, evolving mid-to-late stage startup environment. You will act as the customer's advocate, and communicate customer insights back to the Resilience team to enhance the company-wide internal feedback loop. With a global presence and operational needs across all geographies, flexible working hours are essential.
This position requires candidates to be located in either the CST or EST time zone.

Responsibilities:

• Participate in customer engagements to translate security concepts into risk impact.
• Create impactful experiences for key customer stakeholders which include mid-level through C-suite security, risk, and finance professionals.
• Assess the impact of security vulnerabilities and weaknesses in a company’s networks and quickly recommend changes to processes and technologies to reduce customer cyber risk.
• Own the technical solution response to the customer and help deliver a comprehensive Resilience solution response that leverages the Resilience SaaS portal and your expertise.
• Present the solution proposal to the customer, demonstrate how it reduces the customer’s risk and the financial impact of that risk reduction, and how the solution is differentiated from the competition.
• Act as technical security subject matter expert for internal (Product, Engineering, Data Science, and Underwriting) and external (customers and insurance brokers) audiences that connect security to risk.
• Assist with risk selection in collaboration with Underwriting.
• Anticipated Travel: 15-20%

Qualifications:

• 7+ years of experience with cyber risk management principles and frameworks such as CMMC, GDPR, HIPAA, ISO 27001, NIST CSF, PCI DSS, etc.
• 2+ years of experience in a consultative or advisory role.
• Strong communication and interpersonal skills to effectively collaborate with mid-level to C-suite stakeholders.
• Ability to assess the impact of security vulnerabilities and weaknesses in a company’s networks and quickly recommend changes to processes and technologies to remediate.
• Experience in conducting risk assessments and developing risk mitigation strategies.
• Understanding of incident response procedures and best practices.
• Excellent analytical and problem-solving skills
• Strong communication and interpersonal skills to effectively collaborate with mid-level to C-suite stakeholders.
• Relevant professional certifications (e.g. CISSP, CISA, CISM, CRISC) are a plus.
• Ability to work independently and manage multiple tasks in a fast-paced environment.
• Strong attention to detail.
• Ability to work in a self-directed environment that is highly collaborative and cross-functional.
• Bachelor's degree in computer science, information security, risk manageme