DescriptionThe Global Risk Solutions (GRS) Cyber Risk Engineering (CRE) team would like you to consider joining us to lead our CREs and consult with underwriters on the technical risk associated with organizations seeking cyber insurance. We also need your help bridging the lines of communication between the stakeholders (underwriters, CISOs, and security savvy agents/brokers), and building our tools, services, and processes.
Key Responsibilities:- Lead a global team of cybersecurity professionals, our Cyber Risk Engineers. They (and you) will:
- Consult with and advise underwriters in evaluating the risk of companies looking for cyber insurance
- Provide educational services to our clients and support loss control to help minimize client risk
- Provide thought leadership about cyber security and insurance
- Cyber insurance is projected to grow from $13 billion in 2023 to $30-50 billion in 2030. Unlike other lines of insurance which can be underwritten using traditional models, cyber insurance requires understanding an individual organization's specific technical situation in context. We need you to help our underwriters attract, and review the risk of, companies looking for cyber insurance.
- Additionally, cyber insurance is an ongoing relationship. Many of our clients want help with their cyber security. This role provides educational services to our clients to equip them to manage their cyber risk.
- Every day you'll meet with people who have a new challenge to solve. And at the end of the day, you'll have their appreciation for your help and will have made the world a better place. You'll also have the opportunity to build connections and educate internal and external clients on cyber security and insurance.
Who are we?CRE works alongside our product (the insurance policies) team, our cyber strategy team, the cyber underwriters, and multiple other teams (Collectively the Global Cyber Office).
The CRE team is specifically responsible for a few things:
1. Helping underwriters (who decide who/what to insure for what price) understand the cyber risk of an organization and attract new organizations for cyber insurance.
2. Helping clients manage and improve their security on an ongoing basis.
3. Helping design technical tools to make #1 and #2 more efficient.
One of the most rewarding things about this role is that you'll be creating win/win/win solutions, because the incentives of our company, our partners, and the incentives of our clients all align on making the world a safer, more secure place.
What Next?The need for us is immediate, but we will likely take our time to find the right candidate. There won't be any graded 'tests', just a structured set of mostly open-ended questions for the interviews. We'll have a few rounds over a couple weeks with folks who have security, underwriting, and leadership backgrounds.
Apply now!
If the selected candidate lives within 50 miles of a GRS office, then the selected candidate must be able to come into the office up to three days/week.
QualificationsQualifications and Skills- Experience leading cyber security practitioners
- The ability to appreciate the lived experiences of those you lead and the individual needs they have. As a global team, this includes learning how best to support multiple locales and cultures.
- The ability to facilitate the success of those you lead, given their individual needs.
- Experience in cyber security such as but not limited to a consulting security engineer, a consulting security architect, a CISO, a security evangelist, a pre-sales security engineer, a Governance, Risk, and Compliance (GRC) analyst
- Strong Communication skills
- Inclusive mindset - being a global team you'll need the willingness to build trust with a diverse set of partners & clients.
- The ability to handle uncertainty and complexity
- Technical skills related to cyber security
In short, we need cyber security SMEs who can communicate with stakeholders. You and your team will use:
1. Communication skills. Having a knack for explaining cyber security to internal and external stakeholders with varying levels of cyber-security knowledge.
2. The ability to handle uncertainty and complexity. Risk assessment is complex, and underwriters are working under time pressure, so all the information is often not available. We'll be asking you to make your best judgement based on the information at hand. An adaptable mindset is often needed to be able to think both like a cybersecurity professional, as well as an underwriter1. And you'll often need to be able to see the broad, strategic picture beyond the details.
3. Technical skills. We don't expect you to know everything but do need you to have a good working knowledge of information security. Self-learning, skills, certifications, or standards knowledge are all acceptable ways of demonstrating your information security knowledge.
What it's ok not to beWe don't need you to understand insurance. That you can learn here. We won't make you do lots of math (unless you want to of course!) You don't need to be the perfect cyber security professional. We aren't prefect. You don't need to be either. It's ok not to be dedicated to work at the exclusion of everything else. Work-life balance is important.
Pay Philosophy: The typical starting salary range for this role is determined by a number of factors including skills, experience, education, certifications and location. The full salary range for this role reflects the competitive labor market value for all employees in these positions across the national market and provides an opportunity to progress as employees grow and develop within the role. Some roles at Liberty Mutual have a corresponding compensation plan which may include commission and/or bonus earnings at rates that vary based on multiple factors set forth in the compensation plan for the role.
