Allied World · 14 hours ago
Associate, Analyst, IT Cyber
Farmington1690 New Britain Avenue
Full-time
Onsite
Mid Level
3+ years expAllied World is a global provider of insurance and reinsurance solutions, and they are seeking an Associate, Analyst, IT Cyber. The Governance Analyst will support compliance and governance initiatives, ensuring adherence to policies that align with regulatory requirements and collaborating with various departments to improve organizational maturity and risk management.
FinanceFinancial ServicesInsurance
Responsibilities
Conduct regular control assessments to identify and evaluate potential non-compliance to applicable frameworks
Utilize frameworks like NIST 2.0, CIS Version 8 etc. as the basis for control reporting
Proactively identify policy and program improvement areas from the control assessments for the improvement of organizational maturity levels
Ensure periodic testing and reporting of the operational and design effectiveness of IT controls
Ensure reports are clear, concise, and actionable, providing insights into potential impact and recommended mitigation strategies
Collaborate with relevant stakeholders to monitor compliance (through automated and manual tests) to IT governance policies and procedures
Ensure implemented processes and controls align with industry best practices and regulatory requirements
Ensure the organization’s IT governance practices and control implementations comply with relevant frameworks, including: NIST CSF 2.0 (National Institute of Standards and Technology Cyber Security Framework): Focus on identifying, protecting, detecting, responding, and recovering from cybersecurity threats
CIS Version 8 (Center for Internet Security): Implement critical security controls to defend against prevalent cyber threats
Demonstrate strong inclination to automate control validation processes to minimize manual efforts
Ensure constant efforts to adopt automation mechanisms for control validation and process improvement
Develop and conduct training programs to raise awareness of IT governance and cyber risk management across the organization
Ensure that all employees understand their roles in maintaining security and compliance
Regularly review and update IT governance practices to reflect changes in the threat landscape and business environment
Foster a culture of continuous improvement and proactive risk management
Qualification
Required
Bachelor's degree in Cybersecurity, Information Technology, Business Administration, or related field
3+ years of experience in governance, risk, and compliance (GRC) or a related role with a focus on policy development
Strong understanding of cybersecurity and enterprise frameworks (e.g., NIST CSF, COBIT, CIS, ISO 27001)
Familiarity with regulatory requirements and standards such as DORA, GDPR, NIS2, or other relevant industry-specific regulations
Knowledge of operational and cyber resilience principles
Proven ability to write clear, concise, and actionable policies tailored to both technical and non-technical audiences
Strong analytical skills to interpret regulatory requirements and framework controls
Excellent verbal and written communication skills
Ability to collaborate with cross-functional teams and stakeholders
Preferred
Certifications such as Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), Certified Information Systems Security Professional (CISSP), or Certified in Governance of Enterprise IT (CGEIT)
Proficiency in governance, risk, and compliance (GRC) tools is a plus
Benefits
Health, Dental and Disability Insurance
A company match 401k plan
Group Term Life Insurance
Company
Allied World
About Allied World Allied World Assurance Company Holdings, Ltd, through its subsidiaries, is a global provider of insurance and reinsurance solutions.
1001-5000 employees
Funding
Current Stage
Public CompanyTotal Funding
unknown2017-07-07Acquired
2006-07-12IPO
Leadership Team
Denise Choy
VP, Asia Pacific Professional Lines Division at Allied World
Erin Ringbloom
Vice President
Recent News
2025-06-26
2024-02-18
Company data provided by crunchbase