Security & Risk Analyst Flex Office/Home

In this position you will analyze IT disaster recovery capabilities, resiliency in design, threats, risks, and exposures. You will determine the causes of resiliency and recovery deviations and suggest procedures to prevent future incidents and improve resiliency and recoverability. You will collaborate cross-functionally in business and system requirements analysis. You will report to a senior manager and support IT in designing and maintaining disaster recovery planning and exercises.

Position Compensation Range:
$76,000.00 - $125,000.00

Pay Rate Type:
Salary

Compensation may vary based on the job level and your geographic work location. Relocation support is offered for eligible candidates.

Primary Accountabilities

You will assist in and perform resiliency, recovery, and risk-related analysis including data gathering, calculations, and formal reporting.
You will assist in and perform the analysis of business and system requirements and capabilities (e.g., recovery and resiliency controls) including data gathering, calculations, and formal reporting.
You will build strong relationships with peers across functions through collaborative analysis and reporting exercises.
You will participate in the assessment, remediation, and tracking of information technology risks.
You will participate in the preparation and coordination of disaster recovery exercises.
You will execute compliance audits including risk assessment, audit scope, identifying and testing processes/controls, and participate in the development of specific recommendations.
You will analyze existing issues and incidents and determine action in line with risk management strategy and standards.
You will monitor any legal or regulatory non-compliance as part of the divisional risk management process.
You will coordinate the completion and review of divisional risk and control self-assessments and associated documentation to ensure they meet standards.
Specialized Knowledge & Skills Requirements

Demonstrated experience providing customer-driven solutions, support or service.
Basic knowledge of resiliency and recovery processes and standards for conducting and reporting resiliency/recovery analysis to stakeholders.
Basic knowledge and understanding of IT Risk Management and/or Information Systems Auditing.
Basic knowledge and understanding of IT risk and control frameworks.
Basic knowledge and understanding of the process to conduct IT risk and control assessments.
Basic knowledge and understanding of IT risk management and reporting.
Basic knowledge and understanding of risk management methods, standards, processes, governance models, and industry standard risk analysis approaches.
Certifications:

DRII ABCP (or) BCI CBCI
Travel Requirements

Up to 10%.
Physical Requirements

Work that primarily involves sitting/standing.
Work Shift:

On call 24x7 for Disaster Response, Fusion RM support activities. 2-week rotation primary, 2-week backup
Periodic, scheduled testing activities will require work during non-business hours.
Additional Preferred Skills:

You will have IT experience.
You will demonstrate experience applying information security and compliance standards, including but not limited to PCI, MAR, and HIPAA requirements for the recovery of information systems.
You will contribute to complex technology projects.
You will contribute to the quality assurance of disaster recovery and business continuity plans and processes.
You will have knowledge and understanding of information technology security controls and risk frameworks.
You will understand disaster recovery and business continuity concepts, business impact analysis, information security, failover testing, and recovery state acceptable data loss.
You will be proficient in MS Suite (Outlook, Teams, Excel, Word, PowerPoint, SharePoint).
You will be familiar with data assessment and reporting.
You will have familiarity with:
Business Continuity concepts
Disaster Recovery concepts
Governance Risk and Compliance (GRC) concepts
Fusion Risk Management SaaS tool
ServiceNow SaaS tool
Scaled Agile Framework (SAFe)
Jira SaaS tool
Confluence SaaS tool

In this flex office/home role, you will be expected to work a minimum of 10 days per month from one of the following office locations: Madison, WI 53783; Boston, MA 02110
• LI-Hybrid

Internal candidates are encouraged to apply regardless of location and will be considered based upon the needs of the role.

We encourage you to apply even if you do not meet all of the requirements listed above. Skills can be used in many different ways, and your life and professional experience may be relevant beyond what a list of requirements will capture. We encourage those who are passionate about what we do to apply!

We provide benefits that support your physical, emotional, and financial wellbeing. You will have access to comprehensive medical, dental, vision and wellbeing benefits that enable you to take care of your health. We also offer a competitive 401(k) contribution, a pension plan, an annual incentive, 9 paid holidays and a paid time off program (23 days accrued annually for full-time employees). In addition, our student loan repayment program and paid-family leave are available to support our employees and their families. Interns and contingent workers are not eligible for American Family Insurance Group benefits.

We are an equal opportunity employer. It is our policy to comply with all applicable federal, state and local laws pertaining to non-discrimination, non-harassment and equal opportunity. We also consider qualified applicants with criminal histories, consistent with applicable federal, state and local law.
• LI-CH2