Primary Details

Time Type: Full time

Worker Type: Employee

As a direct report to the Global Head of Cyber Service Operations & Governance, this role is responsible for supporting the establishment and management of a team of cyber service operations and governance specialists to enable improved service delivery to divisional CIO teams and business stakeholders.
This role is responsible for the governance and execution of Third-Party Supplier Management, ensuring effective end-to-end process is in place to appropriately manage cyber and resiliency risk for identified suppliers globally. To ensure teams effectively execute against globally consistent processes, this role may also drive effective governance related to the various global processes and services, including Secure by Design, Secure in Run, Firewall Revalidation and User and Domain exceptions management.
Strategic leadership role that manages a team and is an advisor to all technical and business functions across the division and globally on all risk related activities. Manage key relationships with divisional and global stakeholders regarding identified security risks related to policies, standards and audit requirements, and ensures new requirements are incorporated into existing standards.

The Opportunity: As a direct report to the Global Head of Cyber Service Operations & Governance, this role is responsible for supporting the establishment and management of a team of cyber service operations and governance specialists to enable improved service delivery to divisional CIO teams and business stakeholders. 

This role is responsible for the governance and execution of Third-Party Supplier Management, ensuring effective end-to-end process is in place to appropriately manage cyber and resiliency risk for identified suppliers globally. You will ensure teams effectively execute against globally consistent processes, this role may also drive effective governance related to the various global processes and services, including Secure by Design, Secure in Run, Firewall Revalidation and User and Domain exceptions management.

This is a strategic leadership role that manages a team and is an advisor to all technical and business functions across the division and globally on all risk related activities. You will manage key relationships with divisional and global stakeholders regarding identified security risks related to policies, standards and audit requirements, and ensures new requirements are incorporated into existing standards.

• Location: Sun Prairie, Wisconsin, USA

• Work Arrangement: This role is a hybrid role, with the expectation of 2-3 days/week our Sun Prairie the office.

• The starting salary range for this role is between $148,000-$222,000 annually

Your New Role:

• Align with QBE Operating Principles with a focus on global alignment, challenging thinking to consistently deliver and drive outcomes towards our purpose, vision, strategy and culture.
• Elevate business partnering capabilities by reducing the burden of service delivery from the DISO teams​.
• Centralized ownership of uplift and maintenance of Global Cyber Security service catalogue.
• Enable consistent, efficient and improved cyber service delivery to Technology Services teams and business stakeholders through consolidation or governance of services that:​ are repeatable; ​must be consistently delivered across the globe; ​require global decision making/deeper expertise; ​can be grouped together with other similar specialized services across the globe.
• Assist in designing new global operational services to ensure clarity of delivery model across people, process and technologies; own and maintain agreed global services with continuous improvement plans in place.
• Take ownership of relevant capabilities and team members (including GSSC) to support potential opportunities for service consolidation.
• Governance and execution of Third-Party Supplier Management, ensuring effective end-to-end process is in place to appropriately manage cyber and resiliency risk for identified suppliers globally
• Perform Risk and Control Self Assessments for relevant Cyber Security Controls and/or assist in peer reviews/QA.
• Execute and coordinate with ERM on reviews and any issues from the Risk and Control Self Assessments (RCSA) or Independent Control Assurance (ICA) activities
• Act with integrity and transparency in threat and risk identification and problem solving.
• Role model the creation, innovation and negotiation of solutions and risk mitigation strategies; driving fast paced and agile behaviors.
• Take personal accountability for seeking out and identifying compliance and security weaknesses; self-identify associate