Sr. IT Risk and Security Analyst

We have an exciting new opportunity to join Symetra as a Sr. IT Risk and Security Analyst.

About the role
The Senior IT Risk and Security Analyst (RSA) is a critical member of the Information Security Officer's (ISO's) team. The RSA's role is to act as an interface between IT, Audit Services and the business for overall IT risk management. The RSA must understand our current IT Control environment including IT General Controls and ISO 27001 Information Security Critical Controls while improving our risk posture. The RSA coordinates with several collaborators including the business, audit services, and IT to handle, evaluate and remediate issues.

What you will do

• Provides consulting services to the IT organization regarding risk and control on a wide range of projects and corporate initiatives.
• Leads risk committee activities within the Information Security Risk and Assurance Forum.
• Identifies risks, and where possible, design and implement controls to mitigate risks.
• Responsible to develop and maintain the IT General Controls (Sarbanes-Oxley) program's and ISO 27001 critical security controls, which includes ensuring IT general controls are designed and operating effectively.
• Establishes transparent and concise reporting while maintaining strong relationships with IT management, financial management, Audit Services, key auditors and internal IT clients.
• Assist security administrators and IT staff in the resolution of reported security incidents.
• Provides oversight of Symetra's third party IT service providers.
• Conducts considerable analysis to understand any third party new technology and systems to interpret risks propose and implement solutions.

What we offer you
We don't take a "one-size-fits-all" approach when it comes to our employees. Our programs are crafted to make your life better both at work and at home.

• Flexible full-time or hybrid telecommuting arrangements
• Plan for your future with our 401(k) plan and take advantage of immediate vesting and company matching up to 6%
• Paid time away including vacation and sick time, flex days and ten paid holidays
• Give back to your community and double your impact through our company matching
• Want more details? Check out our Symetra Benefits Overview

Compensation

Salary Range: $77,600 - $129,400 plus eligibility for annual bonus program.

Your experience and skills

• 3+ years of demonstrated work experience in a related field. A BS/BA degree in a related field and advanced level PC skills including specific technical skills detailed above.
• Experience with common information security management frameworks, such as International Standards Organization (ISO) 2700x, the IT Infrastructure Library (ITIL) and Control Objectives for Information and Related Technology (COBIT) frameworks [Substitute as appropriate].
• Knowledge of the following: GAAP, Sarbanes-Oxley, or COSO.
• Professional certification such as CISA, CFE, CISSP or GIAC. (Preferred)
• Excellent written and oral skills.
• Ability to communicate highly technical issues to non-technical audiences and proven leaderships and supervisory skills.
• Experience working with legal, audit and compliance staff. In-depth knowledge and understanding of information risk concepts and principles as a means of relating business needs to security controls.

We empower inclusion
At Symetra, we aspire to be the most inclusive insurance company in the country. We're building a place where every employee feels valued, respected, and has opportunities to contribute. Inclusion is about recognizing our assumptions, considering multiple perspectives, and removing barriers.
We accept and celebrate diverse experiences, identities, and perspectives, because lifting each other up fuels thought and builds a stronger, more innovative company. We invite you to learn more about our efforts here.

Creating a world where more people have access to financial freedom
Symetra is a national financial services company dedicated to helping people achieve their financial goals and feel confident about the future. In our daily work, we're guided by the principles of Value, Transparency and Sustainability. This means we provide products and services people need at a competitive price, we communicate clearly and openly so people understand what they're buying, and we design products-and operate our company-to stand the test of time. We're committed to showing up for our communities, lifting up our employees, and standing up for diversity, equity and inclusion (DEI). Join our team and help us create a world where more people have access to financial freedom.

Work Authorization
Employer work visa sponsorship and support are not provided for this role. Applicants must be currently authorized to work in the United States at hire and must maintain authorization to work in the United States throughout their employment with our company.

#REMOTE