Intact Insurance Specialty Solutions
Intact Insurance Specialty Solutions
Intact Insurance Specialty Solutions, un brand de marketing al Intact Insurance Group USA LLC, oferă servicii specializate de asigurări comerciale și gestionare a riscurilor pentru companii și parteneri de distribuție, precum producători și brokeri. Oferta sa include garanții comerciale și contractuale, asigurări pentru industria divertismentului, asigurări de mediu, asigurări pentru proprietăți excedentare, instituții financiare, asigurări maritime interne și oceanice, răspunderea conducerii, tehnologie și rambursarea taxelor de școlarizare. Specialiștii în daune și controlul riscurilor sprijină clienții din sectoare precum transportul maritim, media și divertismentul, construcțiile, serviciile medicale, educația și finanțele.

IT Risk and Compliance Analyst | Intact Insurance Specialty Solutions

Support cybersecurity governance, audit response, risk metrics, and application security testing at Intact Insurance Specialty Solutions. Help manage technology risk across regulated insurance operations.

Descriere

  • Maintain records of IT and cybersecurity risks, controls, owners, evidence requests, action items, dependencies, deadlines, exceptions, and remediation status.
  • Collect and validate information for risk reviews, control assessments, compliance work, cybersecurity metrics, and management reporting.
  • Coordinate audit responses among internal and external auditors and IT, security, infrastructure, compliance, and business stakeholders.
  • Track audit requests, evidence, findings, remediation, retesting, risk acceptances, compensating controls, deadlines, and closure.
  • Prepare clear responses to audit findings and maintain organized, repeatable, auditable evidence.
  • Collect, organize, and analyze cybersecurity and IT risk metrics.
  • Create reports, dashboards, and management summaries with reporting tools.
  • Assess trends, gaps, aging items, control exceptions, and remediation progress for leaders, risk committees, auditors, and nontechnical audiences.
  • Maintain metric definitions, data owners, source systems, refresh schedules, assumptions, and limitations.
  • Maintain trackers, checklists, evidence logs, reporting calendars, process maps, and follow-up routines.
  • Coordinate application security and penetration testing from scoping and scheduling through findings, remediation validation, retesting, and closure.
  • Maintain application inventories, support secure software development practices, prepare management reports, and align testing with organizational and regulatory requirements.
  • Use recognized cybersecurity and control frameworks, including NIST-based terminology.
  • Clarify ownership, next steps, and response dates, and follow up with stakeholders.
  • Escalate material risks, delays, unclear ownership, and data quality concerns.

Cerințe

  • Degree in management, audit, accounting, or a related field, or equivalent relevant experience.
  • Three to five years of experience in IT risk, GRC, information security, IT audit, technology controls, security operations, or a related function.
  • Experience in insurance, financial services, healthcare, utilities, or another regulated or compliance-intensive industry is preferred.
  • Certifications such as Security+, CISA, CRISC, CISM, CISSP, CGRC, or ITIL Foundation are preferred but not required.
  • Experience with NIST-based cybersecurity and control frameworks.
  • Experience using Excel, PowerPoint, SharePoint, ticketing systems, and reporting platforms.
  • Knowledge of vulnerability management, identity and access management, endpoint protection, incident response, infrastructure operations, logging, and monitoring.
  • Experience coordinating application security and penetration testing for internally developed, SaaS, web, mobile, API, cloud, and vendor-hosted applications.
  • Ability to collect, validate, organize, analyze, and report cybersecurity risk and control information.
  • Ability to coordinate with internal and external auditors and diverse technical and business stakeholders.

Beneficii

  • Bonus eligibility.
  • Comprehensive medical, dental, and vision insurance with no waiting period.
  • Competitive paid time off programs.
  • 401(k) savings plan with annual contributions of up to 12% of annual salary.
  • Mental health support programs.
  • Life and disability insurance.
  • Paid parental leave.
  • Additional voluntary benefits.
  • Flexible work arrangement options.
  • Performance-based financial rewards.
  • Professional growth, learning, and development opportunities.

Locuri de muncă similare

Crash Champions

General Manager, Collision Repair – Pompano Beach

Crash Champions

Lead daily collision repair operations at Crash Champions’ Pompano Beach center, overseeing production, staffing, repair quality, estimates, and performance goals. Support and develop the team while managing work from vehicle intake through delivery.

Deschide