Cyber Risk Engineer, APAC

The Global Risk Solutions (GRS) Cyber Risk Engineering (CRE) team would like you to consider joining us to consult with underwriters on the technical risk associated with organizations seeking cyber insurance. We also need your help bridging the lines of communication between the stakeholders (underwriters, CISOs, and security savvy agents/brokers), and building our tools, services, and processes.

About the Department & Team:

CRE works alongside our product (the insurance policies) team, our cyber strategy team, the cyber underwriters, and multiple other teams (Collectively the Global Cyber Underwriting office).

The CRE team is specifically responsible for:

1. Helping underwriters (who decide who/what to insure for what price) understand the cyber risk of an organization.
2. Helping clients manage and improve their security on an ongoing basis.
3. Helping design technical tools to make #1 and #2 more efficient.

One of the most rewarding things about this role is that you will be creating win/win/win solutions, because the incentives of our company, our partners, and the incentives of our clients all align on making the world a safer, more secure place.

Responsibilities:

• Consult with and advise underwriters in evaluating the risk of companies looking for cyber insurance. Unlike other lines of insurance which can be underwritten using traditional methods, cyber insurance requires understanding an individual organization’s specific technical situation in context. We need you to help our underwriters review the risk of companies looking for cyber insurance.
• Provide advisory services to our clients and support loss control to help minimize client risk. Cyber insurance is an ongoing relationship. Many of our clients want help with their cyber security. This role provides advisory services to our clients to equip them to manage their cyber risk. Every day you will meet with people who have a new challenge to solve.
• Provide thought leadership about cyber security and insurance
• Build connections and educate internal and external clients on cyber security and insurance.
• Adhere to all relevant regulatory and internal requirements and proactively demonstrate compliance with these requirements and behaviors at all times.

Experience & Skills:

• Experience in cyber security such as but not limited to a consulting security engineer, a consulting security architect, a CISO, a security evangelist, a pre-sales security engineer, a Governance, Risk, and Compliance (GRC) analyst.
• Strong Communication skills. Having a knack for explaining cyber security to internal and external stakeholders with varying levels of cyber-security knowledge.
• Inclusive mindset – being a global team you will need the willingness to build trust with a diverse set of partners and clients.
• The ability to handle uncertainty and complexity. Risk assessment is complex, and underwriters are working under time pressure, so all the information is often not available. We will be asking you to make your best judgement based on the information at hand. An adaptable mindset is often needed to be able to think both like a cybersecurity professional, as well as an underwriter. And you will often need to be able to see the broad, strategic picture beyond the details.
• Technical skills related to cyber security. We need you to have a good working knowledge of information security. Self-learning, skills, certifications, or standards knowledge are all acceptable ways of demonstrating your information security knowledge.