AVP, Cyber Risk Services

The annual base salary range provided for this position is a nationwide market range and represents a broad range of salaries for this role across the country. The actual salary for this position will be determined by a number of factors, including the scope, complexity and location of the role; the skills, education, training, credentials and experience of the candidate; and other conditions of employment. As part of our comprehensive compensation and benefits program, employees are also eligible for performance-based cash incentive awards.

• Lead a cybersecurity advisory team with responsibilities to support cyber insurance policyholders, agents, and underwriters.
• Drive the strategy planning for the cybersecurity advisory team, ensuring strong partnerships with business unit leaders, Underwriting, Tech, and Product leadership.
• Deliver a consistent service experience to policyholders and underwriters that enables them to understand and remediate cyber risks.
• Improve existing cyber risk best practices and guidelines for use with external policyholders and accounts. Implement universal tools and processes while driving continuous improvement.
• Provide expert consultation on cyber risk and technology-related risks, partnering with accounts and policyholders to enhance risk management practices.
• Support the identification, maintenance, and assessment of key vendor relationships to most effectively manage customer accounts.
• Collaborate with other business areas, including Underwriting, Risk Control, Legal, Claim and Regulatory, in the development of enterprise awareness and training strategies pertaining to cyber risk.
• Scale our cyber expertise through our underwriters and broker partners to enable intelligent risk decisions and drive a competitive advantage.
• Perform other duties as assigned.

• Bachelor's or Master's degree.
• Demonstrated ability to lead teams and foster a culture of excellence and accountability
• Demonstrated ability as a leader and expert in the field of cybersecurity risk management.
• Expert understanding of cybercrime schemes such as computer intrusions, internet fraud, intellectual property violations, and denial of service attacks at a management level.
• Expert understanding of cyber risk management strategies within the context of common types of cyberattacks.
• Expert knowledge of information & network security best practices.
• Knowledge of data privacy laws and regulations including PCI-DSS, HIPPA, and other statutes protecting consumer identity information.
• Knowledge of insurance coverage pertaining to Cyber insurance products.
• Superior written and verbal communication skills, with the ability to articulate complex technical concepts to a diverse audience
• Proven ability to lead and facilitate advanced training sessions, workshops, and tabletop exercises.

• Minimum of 6+ years of experience in cyber risk management, digital forensics and incident response, cybercrime investigations, IT Security, or other related areas required.
• 4+ years of management experience.