Senior Cybersecurity Engineer

$80,000 - $130,000/Yr

Markel - Chicago, IL

Full-time - Mid Level

Hybrid - Chicago, IL

251-500 employees

Insurance Carriers and Related Activities

About the position

The Cybersecurity Specialist at Markel plays a crucial role in supporting the underwriting program by identifying, evaluating, and reporting cybersecurity risks across the underwriting portfolio. This position involves collaborating with underwriters and clients to mitigate risks, conducting risk assessments, and providing cybersecurity advisory services. The specialist will also engage in training and education efforts to enhance the understanding of cybersecurity within the organization.

Responsibilities

• Work with Risk Solution Services team to identify and mitigate risk through assessment, evaluation and training.
• Assist in identifying potential cybersecurity risks to Markel's clients utilizing available tools and data.
• Provide recommendations for risk improvement.
• Recognize and communicate internal and external developments that may impact cybersecurity risk.
• Act as subject matter expert on cyber and provide necessary trainings to develop RSS team members and update underwriting on latest trends.
• Engage and support the underwriting team and brokers in cybersecurity education.
• Assist in evaluating risk controls that mitigate cybersecurity risk and find gaps where vulnerabilities could potentially cause unanticipated liabilities and/or losses.
• Learn BlackKite and assist underwriters and insureds with understanding report results.
• Provide cybersecurity advisory/consultative services to Markel's underwriters, brokers, and clients.
• Liaise between underwriters and cyber risk management vendors.
• Assist in developing and presenting high-level risk reviews and analyses to Markel's underwriters, senior leaders, and clients.
• Assist with researching, identifying, evaluating, selecting, and negotiating with partners to expand the value-add services that Markel's underwriting team brings to cybersecurity risk management.
• Lead alerting process with clients, applicants, brokers, and underwriters leveraging existing tools and capabilities to identify and mitigate existing high-risk vulnerabilities.
• Lead and manage vendor aggregation reporting (reports, dashboards, etc.).
• Create and manage recurring reporting mechanisms (reports, dashboards, etc.).
• Develop and maintain cybersecurity subject matter expertise.
• Independently manage workload and maintain documentation for tracking of work requests.

Requirements

• Bachelor's degree in Information Security or Computer Science, or related work experience/certification required.
• Certified in Risk and Information Systems Control (CRISC) preferred.
• Certified Information Systems Security Professional (CISSP) preferred.
• Minimum of five years combined IT, risk management, cybersecurity work experience.
• Experience with vulnerability management tools.
• Experience with cyber risk scorecard tools.
• Experience with BlackKite is a plus.
• Experience with IT process, risk, and control frameworks, such as NIST and ISO.
• Critical thinking and attention to detail.
• Cloud computing knowledge.
• Good communication, organization, documentation, and presentation skills.

Nice-to-haves

• Experience with additional cybersecurity tools and frameworks.
• Advanced certifications in cybersecurity or risk management.

Benefits

• Multiple health, dental and vision insurance plan options.
• Optional life, disability, and AD&D insurance.
• 401(k) with employer match contributions.
• Employee Stock Purchase Plan.
• Paid Time Off (PTO).
• Corporate holidays and floating holidays.
• Parental leave.
• Hybrid working schedules of 3 days in the office and 2 days remote.