Cybersecurity Analyst

Cybersecurity Analyst

The position will focus primarily on performance access review (PAR) activities supporting Assurant applications. The role will manage collecting and validating user access lists with business owners and coordinating artifacts to support external audit engagements. The position will also provide assistance with our completeness and accuracy program supporting the access review process. The candidate will contribute to team projects and IT control testing activities ensuring data protection practices are followed and pass evidence inspection requirements.

The following responsibilities apply to the general Cybersecurity Analyst position:

• Governance, Compliance & Audit Support - Ensure adherence to regulatory frameworks (e.g., PCI-DSS, NY DFS, GLBA, SOX, DORA, etc.). Support internal and external audits, including vendor and client assessments. Maintain documentation and evidence for compliance activities. Collaborate with Legal, Privacy, Risk, Global Technology and other Cybersecurity teams. Ensure timely and effective cybersecurity education and awareness
• Technology & Security Systems Management - Administer and monitor cybersecurity tools and platforms (e.g., SIEM, endpoint protection, vulnerability scanners). Respond to security incidents and alerts. Perform root cause analysis and recommend remediation.
• Security Operations – Conduct threat monitoring and analysis via multi-telemetry-based alerts, triage, develop and deliver formal incident reports, and work with technology teams on remediation and improvements.
• Identity and Access Management (IAM) - Manage user access provisioning, de-provisioning, and role-based access controls. Ensure compliance with least privilege and segregation of duties principles. Support IAM audits and reviews.
• Project Support & Risk Assessment - Participate in security-related projects and initiatives. Conduct risk assessments for new technologies and vendors. Provide input on security, architecture and design.
• Reporting & Metrics - Develop and maintain dashboards and reports on security posture, compliance status, project/task status and audit findings. Present findings to leadership and stakeholders.

Required:

• Education: Bachelor's degree preferred; in Computer Science, Information Security, or a related field; or two-year technical certification in Information Systems, Business Management, Computer Science, Engineering, Audit or related.
• Experience: Minimum 3 years in IT Security, Compliance, Audit, or IAM roles
• Knowledge & Skills:
• Strong understanding of cybersecurity frameworks and regulatory requirements
• Experience with IAM tools and processes
• Familiarity with audit procedures and evidence collection
• Proficiency in security technologies (e.g., firewalls, SIEM, endpoint protection)
• Excellent communication and documentation abilities - using appropriate level of communication up and down the organization
• Works to gain a deep understanding of requests or tasks and offers suggestions to streamline
• Build and maintain strong working relationships with sponsors, stakeholders, and team members
• Strong problem-solving, critical thinking and troubleshooting skills
• Ability to effectively influence others to modify their opinions, plans or behaviors
• Effectively work independently and collaboratively in a virtual team environment
• Persistent in completing the tasks - on time and within the deadline
• Spends time on what adds the most value
• Engage the right people at the right time
• Bring grit and determination to get things done

Preferred:

• Active security certification desired or willingness to obtain
• Experience in financial services or insurance industries
• Knowledge of cloud security and modern IAM solutions
• Experience with GRC platforms and risk management methodologies