Information Security Specialist - IS08DE

We're determined to make a difference and are proud to be an insurance company that goes well beyond coverages and policies. Working here means having every opportunity to achieve your goals - and to help others accomplish theirs, too. Join our team as we help shape the future.

The Hartford's Information Protection (THIP) organization is looking for a talented Information Security Specialist to join a high-performing team of cutting-edge cyber professionals. Our Business Security and Governance team provides direct support to our business areas by delivering valued consulting services for security requirements, vendor security assessments, contract reviews, customer inquiry responses and ad-hoc security consulting requests. These security personnel are responsible for governing, managing and delivering on The Hartford's cybersecurity practices.

• Support vendor oversight and monitoring programs to identify emerging risks.
• Perform third-Party Security Assessments to evaluate the security practices and programs to protect The Hartford's interests.
• Support business areas in responding to customer inquiries regarding The Hartford's information security policies, programs and practices.
• Approve remote access requests for vendor resources, based on diligence performed to ensure appropriate security protocols.
• Respond to ad-hoc technical security consulting requests, including at times supporting teammates with security-related projects and support services.
• Maintain awareness of existing and proposed security standards for state/federal regulations regarding information security and data privacy.
• Identify and assesses the technical severity and potential business impacts to classify risks.
• Communicate post risk assessment findings to internal stakeholders Information Security concepts in a way that consistently drives objective, fact-based decisions.
• Participate phishing email reviews and assist in security awareness activities.

• Bachelor of Science Degree, in one of the following disciplines: Engineering, Computer Science, Information Security or related field.
• Minimum of 2 years of work experience in Information Security and/or a closely related function such as threat management, IT Risk, IT Audit, IT Compliance, etc.
• Knowledge of regulatory compliance and information security management frameworks, including NIST CSF, NIST 800 series, IS0 2700 series, COBIT, etc.
• Practical experience with risk assessment frameworks, including the BITS Shared Assessments program, Cloud Security Alliance (CSA) and other benchmark approaches.
• Ability to apply sound judgement in review of third-party risk security rating platforms,
• Understanding of cloud concepts including the primary cloud service models.
• General understanding of technical and non-technical controls with a demonstrated ability to assess third parties.
• Strong organizational skills with the capacity to multi-task on projects with shifting priorities
• A process-oriented mindset with a professional demeanor and customer-focused support
• Effective decision-making capabilities with a proven ability to weigh the cost-benefit of potential actions or decisions.
• Must have excellent written and verbal communication skills.
• Demonstrated interest in the continuous learning mindset.
• Ability to demonstrate business ethical conduct in choosing a course of action consistent with The Hartford's core values.
• Industry security relative certifications such as, CISSP, CISM, CISA, CRISC, CIPP, CDPSE (preferred or willing to obtain)