Senior Cybersecurity Analyst

The Senior Cybersecurity Analyst plays a critical role in safeguarding Assurant’s digital assets and infrastructure. This position leads complex cybersecurity initiatives, provides strategic guidance on risk mitigation, and ensures compliance with global regulatory frameworks. The role requires deep technical expertise, cross-functional collaboration, and the ability to influence and mentor others. The senior analyst drives end-to-end SOC audit programs by leading audit planning, stakeholder coordination, walkthroughs, testing support, and issue resolution. Acting as the primary liaison between external auditors and internal teams, this role provides technical and compliance expertise to strengthen IT controls, support audit readiness, and ensure successful audit outcomes.

What will be my duties and responsibilities in this job?

• Governance, Compliance & Audit Support - Lead the implementation and continuous improvement of cybersecurity policies, standards, and frameworks. Ensure alignment with regulatory requirements (e.g., PCI-DSS, NY DFS, GLBA, SOX, DORA). Act as a subject matter expert in audits and assessments.
• Technology & Security Systems Management – Manage and optimize cybersecurity tools and platforms (e.g., GRC, SIEM, endpoint protection, vulnerability scanners). Respond to security incidents and alerts. Perform root cause analysis and recommend remediation.
• Project Support & Risk Assessment - Lead security-related projects and initiatives. Conduct advanced risk assessments for new technologies and vendors. Provide input on security, architecture and design. Provide oversight and guidance to the design of technical cybersecurity controls to mitigate risks.
• Reporting & Metrics - Develop and maintain dashboards and reports on security posture, compliance status, project/task status and audit findings. Present findings to leadership and stakeholders.  Ability to translate technical risk into business impact.
• Mentorship & Leadership - Provide guidance and mentorship to junior team members. Foster a culture of continuous learning and collaboration within the cybersecurity team.

.

What are the requirements needed for this position? 

• Bachelor’s degree in computer science, Information Security, or related field; advanced certifications preferred 
• 5+ years in cybersecurity, with demonstrated experience in incident response, compliance, IAM, and security architecture
• Deep understanding of cybersecurity frameworks and regulatory requirements
• Strong experience with ITGCs, IT control testing and auditing
• High-level understanding of domestic and international regulatory compliance
• Experience with GRC platforms (ServiceNow GRC) and or audit management tools is a plus
• Familiarity with audit procedures and evidence collection
• Proficiency in security technologies (e.g., firewalls, SIEM, endpoint protection)

Other required skills:

• Excellent communication and documentation abilities - using appropriate level of communication up and down the organization 
• Works to gain a deep understanding of requests or tasks and offers suggestions to streamline
• Build and maintain strong working relationships with sponsors, stakeholders, and team members 
• Strong problem-solving, critical thinking and troubleshooting skills 
• Proven ability to influence others and drive action across functions and levels without direct authority
• Effectively work independently and collaboratively in a virtual team environment
• Strong organizational skills and the ability to split large tasks into logically manageable and decoupled actions which are managed effectively and delivered on time
• Spends time on what adds the most value 
• Engage the right people at the right time 
• Bring grit and determination to get things done

What other skills/experience would be helpful to have?

• Active security certification or equivalent
  • CompTIA Security+  
  • GIAC Security Essentials  
  • Certified Security Analyst (ECSA)  
  • Certified Ethical Hacker (CEH)  
  • Certified Red Team Operator (CRTO) 
  • Offensive Security Certified Professional (OSCP)  
  • Certificated Information Systems Security Professional (CISSP)  
• Experience in financial services or insurance industries
• Knowledge of cloud security and modern IAM solutions
• Experience with GRC platforms and risk management methodologies
• Familiarity with DevSecOps and secure SDLC practices

• Knowledge of data privacy regulations (e.g., GDPR, CCPA)

#AssurantProudJR

Pay Range:

Any posted pay range considers a wide range of compensation factors, including candidate background, experience and work location, while also allowing for salary growth within the position.

If there is no posting end date listed then this is a pipeline requisition, and we will continue to collect applications on an ongoing basis.

Helping People Thrive in a Connected World
Connect with us. Bring us your best work and your brightest ideas. And we’ll bring you a place where you can thrive. Learn more at jobs.assurant.com.

For U.S. benefit information, visit myassurantbenefits.com. For benefit information outside the U.S., please speak with your recruiter.

What’s the culture like at Assurant?
Our unique culture is a big reason why talented people choose Assurant. Named a Best/Great Place to Work in 14 countries and awarded the Fortune America’s Most Innovative Companies recognition, we bring together top talent around the world. Although we have a wide variety of skills and experiences, we share common characteristics that are uniquely Assurant. A passion for service. An ability to innovate in practical ways. And a willingness to take chances. We call our culture The Assurant Way.

Company Overview
Assurant is a leading global business services company that supports, protects, and connects major consumer purchases. A Fortune 500 company with a presence in 21 countries, Assurant supports the advancement of the connected world by partnering with the world’s leading brands to develop innovative solutions and deliver an enhanced customer experience through mobile device solutions, extended service contracts, vehicle protection services, renters insurance, lender-placed insurance products, and other specialty products.

AI and Biometric Usage

Assurant supports the responsible use of Artificial Intelligence (AI), but we want to know the real you. Visit our AI Usage Guidelines page to understand what we expect from applicants regarding their use of AI during the application process. Since we would like to know the real you, we require that all of our virtual interviews be conducted on video.

Employment is contingent upon completion of a required identity verification process, which may include biometric technology, where permitted by applicable law and subject to applicable notice and consent requirements. See our Privacy Notice to learn about Assurant’s privacy practices, including our use of AI-enabled technology, automated decision making, and biometric information.

Equal Opportunity Statement
Assurant is an Equal Employment Opportunity employer and does not use or consider race, color, religion, sex, national origin, age, disability, veteran status, sexual orientation, gender identity, or any other characteristic protected by federal, state, or local law in employment decisions.

Job Scam Alert
Please be aware that during Assurant's application process, we will never ask for personal information such as your Social Security number, bank account details, or passwords. Learn more about what to look out for and how to report a scam here.