Job Description
About the position We are seeking a Cybersecurity Strategy and Policy Analyst to drive the development of internal policy, organizational strategy, and external messaging on cybersecurity and technology topics, risks, and events. This role will apply a strong knowledge of technology, cybersecurity, and data practices and frameworks, as well as analytical skills, to develop, assess, frame, and coordinate high-impact changes to cybersecurity and technology and risk management practices across our family of brands. Responsibilities • Independently apply security best practices to enhance and optimize systems, ensuring robust protection and efficiency, while beginning to understand and align security solutions with business objectives. • Partner with peers and internal teams to drive security initiatives, contribute to cross-functional projects, and at times co-lead efforts to strengthen security posture. • Analyze and resolve security challenges by adapting standard processes and exploring alternative approaches to address complex threats. • Influence the quality, efficiency, and effectiveness of the team through informed decision-making, with a potential impact on other teams. • Collaborate with other engineers to gather and incorporate feedback, driving continuous improvements in security processes. Requirements • Minimum of 5 years of relevant work experience and a Bachelor's degree or equivalent experience. Nice-to-haves • Knowledge of current and emerging information technologies (e.g., AI / ML); cybersecurity threats and vulnerabilities; risk management processes and practices; industry standard control frameworks and best practices (e.g., NIST, ISO); and prominent cybersecurity and privacy regulations globally. • Strong work ethic with proven ability to learn quickly, prioritize work, and manage complex deliverables to completion under established deadlines. • Willingness to drill down into complex topics as needed to understand and validate key tactical or technical details with strategic level implications. • Superb consultative, adjudicative, investigative, and influencing skills, including business acumen, stakeholder empathy, and conflict resolution. • Exceptional verbal and written communication and analysis skills, including experience developing high-quality written analysis, strategy, or policy documents. • Prior involvement in analysis, interpretation, and communication of legal or regulatory technology policy requirements. • Practiced at targeting and delivering written work product and verbal presentations to varied audiences (e.g., executives, engineers, customers, regulators, etc.). • Unquestionable professional and ethical integrity, ideally demonstrated through experience with projects of a sensitive, privileged, or confidential nature. • Ability to approach and understand problems from a statistical or quantitative perspective and draw meaningful, accurate conclusions. • Familiarity with advanced functionality in Microsoft Word, Excel, and PowerPoint, as well as concept and process mapping tools (e.g., Miro, Mural, etc.). Benefits • Flexible work environment • Employee shares options • Health and life insurance • Annual performance bonus • Equity compensation • Medical, dental, and vision benefits Apply tot his job