Cyber Risk Engineer (Bilingual/Spanish)

The typical starting salary range for this role is determined by a number of factors including skills, experience, education, certifications and location. The full salary range for this role reflects the competitive labor market value for all employees in these positions across the national market and provides an opportunity to progress as employees grow and develop within the role. Some roles at Liberty Mutual have a corresponding compensation plan which may include commission and/or bonus earnings at rates that vary based on multiple factors set forth in the compensation plan for the role.

This role requires the candidate to speak Spanish fluently

The Global Risk Solutions (GRS) Cyber Risk Engineering (CRE) team would like you to consider joining us to consult with underwriters on the technical risk associated with organizations seeking cyber insurance.  We also need your help bridging the lines of communication between the stakeholders (underwriters, CISOs, and security savvy agents/brokers), and building our tools, services, and processes.

Key responsibilities

• Consult with and advise underwriters in evaluating the risk of companies looking for cyber insurance
• Provide advisory services to our clients and support loss control to help minimize client risk
• Provide thought leadership about cyber security and insurance

Cyber insurance is projected to grow from $13 billion in 2023 to $33 billion in 2027. Unlike other lines of insurance which can be underwritten using traditional, cyber insurance requires understanding an individual organization’s specific technical situation in context.  We need you to help our underwriters review the risk of companies looking for cyber insurance.

Additionally, cyber insurance is an ongoing relationship.  Many of our clients want help with their cyber security.  This role provides advisory services to our clients to equip them to manage their cyber risk.  Every day you’ll meet with people who have a new challenge to solve.  And at the end of the day, you’ll have their appreciation for your help

and will have made the world a better place.

You’ll also have the opportunity to build connections and educate internal and external clients on cyber security and insurance.

Qualifications and Skills

• Experience in cyber security such as but not limited to a consulting security engineer, a consulting security architect, a CISO, a security evangelist, a pre-sales security engineer, a Governance, Risk, and Compliance (GRC) analyst
• Strong Communication skills
• Inclusive mindset ? being a global team you’ll need the willingness to build trust with a diverse set of partners & clients.
• The ability to handle uncertainty and complexity
• Technical skills related to cyber security
• It's not required, but fluency in Spanish is highly desired

In short, we need cyber security SMEs who can communicate with stakeholders.  You’ll use:

1. Communication skills.  Having a knack for explaining cyber security to internal and external stakeholders with varying levels of cyber-security knowledge. 
2. The ability to handle uncertainty and complexity. Risk assessment is complex, and underwriters are working under time pressure, so all the information is often not available.  We’ll be asking you to make your best judgement based on the information at hand.  An adaptable mindset is often needed to be able to think both like a cybersecurity professional, as well as an underwriter[1].  And you’ll often need to be able to see the broad, strategic picture beyond the details.
3. Technical skills.  We don’t expect you to know everything but do need you to have a good working knowledge of information security.  Self-learning, skills, certifications, or standards knowledge are all acceptable ways of demonstrating your information security knowledge.

What it’s ok not to be

We don’t need you to understand insurance.  That you can learn here.  We won’t make you do lots of math (unless you want to of course!)  You don’t need to be the perfect cyber security professional.  We aren’t prefect. You don’t need to be either. It’s ok not to be dedicated to work at the exclusion of everything else.  Work-life balance is important.

Who are we?

CRE works alongside our product (the insurance policies) team, our cyber strategy team, the cyber underwriters, and multiple other teams (Collectively the Global Cyber Underwriting office). 

The CRE team is specifically responsible for a few things:

1. Helping underwriters (who decide who/what to insure for what price) understand the cyber risk of an organization.
2. Helping clients manage and improve their security on an ongoing basis.
3. Helping design technical tools to make #1 and #2 more efficient.

One of the most rewarding things about this role is that you’ll be creating win/win/win solutions, because the incentives of our company, our partners, and the incentives of our clients all align on making the world a safer, more secure place.

What Next?

The need for us is immediate, but we will likely take our time to find the right candidate.   There won’t be any "tests", just conversations for the interviews.  We’ll have a few rounds over a couple weeks with folks who have security, underwriting, and leadership backgrounds.

[1] Insurance underwriting is essentially a science of making good, rational, data-supported educated guesses in identifying which companies are more or less risky relative to peers.

Qualifications and Skills

• Experience in cyber security such as but not limited to a consulting security engineer, a consulting security architect, a CISO, a security evangelist, a pre-sales security engineer, a Governance, Risk, and Compliance (GRC) analyst
• Strong Communication skills
• Inclusive mindset ? being a global team you’ll need the willingness to build trust with a diverse set of partners & clients.
• The ability to handle uncertainty and complexity
• Technical skills related to cyber security
• It's not required, but fluency in Spanish is highly desired

In short, we need cyber security SMEs who can communicate with stakeholders.  You’ll use:

1. Communication skills.  Having a knack for explaining cyber security to internal and external stakeholders with varying levels of cyber-security knowledge. 
2. The ability to handle uncertainty and complexity. Risk assessment is complex, and underwriters are working under time pressure, so all the information is often not available.  We’ll be asking you to make your best judgement based on the information at hand.  An adaptable mindset is often needed to be able to think both like a cybersecurity professional, as well as an underwriter[1].  And you’ll often need to be able to see the broad, strategic picture beyond the details.
3. Technical skills.  We don’t expect you to know everything but do need you to have a good working knowledge of information security.  Self-learning, skills, certifications, or standards knowledge are all acceptable ways of demonstrating your information security knowledge.

As a purpose-driven organization, Liberty Mutual is committed to fostering an environment where employees from all backgrounds can build long and meaningful careers. Through strong relationships, comprehensive benefits and continuous learning opportunities, we seek to create an environment where employees can succeed, both professionally and personally.

At Liberty Mutual, we believe progress happens when people feel secure. By providing protection for the unexpected and delivering it with care, we help people embrace today and confidently pursue tomorrow.

We are proud to support a diverse, equitable and inclusive workplace, where all employees feel a sense of community, belonging and can do their best work. Our seven Employee Resource Groups (ERGs) offer a centralized, open space to bring employees and allies together to connect, learn and engage.

We value your hard work, integrity and commitment to make things better, and we put people first by offering you benefits that support your life and well-being. To learn more about our benefit offerings please visit: https://LMI.co/Benefits

Liberty Mutual is an equal opportunity employer. We will not tolerate discrimination on the basis of race, color, national origin, sex, sexual orientation, gender identity, religion, age, disability, veteran's status, pregnancy, genetic information or on any basis prohibited by federal, state or local law.

Fair Chance Notices

• California
• Los Angeles Incorporated
• Los Angeles Unincorporated
• Philadelphia
• San Francisco