Kuvare is a growth-oriented insurance platform that delivers diversified annuities, life insurance, and supplemental products to the middle-income and mass-affluent consumer segments through its acquisition-led growth strategy. Kuvare provides proven capabilities, strategic support, substantial resources, and patient capital to help insurance companies pursue and achieve sustainable growth opportunities. With its patient capital, Kuvare targets differentiated annuity and life insurance companies to bring into its family of brands.
Summary/Objective
The IT Security and Controls Analyst is responsible for assessing information risk and facilitates remediation of identified vulnerabilities for IT security and risk across the enterprise. The analyst reports on findings and recommendations for corrective action. The position is also responsible for providing information for all IT audits, including IT risk assessments and regulatory compliance. Performs vulnerability assessments utilizing IT security tools and methodologies. Performs assessments of the IT security/risk posture within the IT network, systems, and software applications, in addition to assessments within the Vendor Management Program. Identifies opportunities to reduce risk and documents remediation options regarding acceptance or mitigation of risk scenarios. Facilitates and monitors performance of risk remediation tasks, changes related to risk mitigation & reports on findings.
Duties & Responsibilities:
Operational Management
- Reviews existing documentation of IT controls, business processes, policies, procedures, and management reports for risk, effectiveness and sustainability
- Participates in internal IT audits to measure risk, control strengths, weaknesses, and compliance.
- Provides responses for all external IT audits, as requested.
- Monitors computer networks for security issues.
- Investigates security breaches and other cybersecurity incidents.
- Works with Infrastructure to install and configure security measures and operate software to protect systems and information infrastructure, including firewalls and data encryption programs.
- Works with the Infrastructure team to remediate detected vulnerabilities to maintain a high-security standard.
- Works with infrastructure and designated security contractors to facilitate penetration testing for all Kuvare companies
- Works with Infrastructure team to remediate discovered vulnerabilities.
Strategy & Planning
- Stay up to date on information technology trends and security standards.
- Research security enhancements and make recommendations to management.
Acquisition & Deployment
- Performs security assessments within the Vendor Management Program.
Experience:
- Bachelor’s degree in computer science or similar.
- Certified Information Systems Auditor (CISA) or Certified Information Systems Security Professional (CISSP) designations preferred.
- Five years of information security experience.
- At least 3 years of internal audit experience or prior work experience with a Big 4 consulting/auditing firm (PWC, Deloitte, EY, or KPMG).
- Solid experience in testing, evaluating, and documenting controls for compliance.
- Understanding of firewalls, SIEM, antivirus, IPS\IDS.
- Ability to identify and mitigate network vulnerabilities and explain how to avoid them.
Skills/Competencies:
- Technical proficiency in network, server, desktop, laptop, and platform operating systems, including mastery of Windows 10.
- Experience documenting and maintaining configuration and process information.
- Strong customer service orientation.
- Proven analytical and problem-solving abilities.
- Ability to effectively prioritize and execute tasks in a high-pressure environment.
- Strong written, interpersonal, and oral communication skills.
- Ability to conduct research into hardware and software issues and products as required.
- Ability to present ideas and solutions in user-friendly language.
Physical Demands:
- Normal office working environment
- Occasional evening and weekend hours to meet deadlines
- Occasional travel is required
- Ability to sit for extended periods of time
- Ability to type / perform data entry
- Ability to read from a computer screen and paper reports
- Express ideas and otherwise communicate with the spoken word
Upon request, reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.
Kuvare company is an equal opportunity employer that makes hiring decisions based on merit, qualifications, and the business need. We are dedicated to a policy of nondiscrimination in employment on any basis including age, sex, color, race, creed, national origin, religious persuasion, marital status, political belief, or disability that does not prohibit performance of essential job functions. We encourage all qualified candidates to apply.