The position: we are seeking a bright and motivated senior information security analyst to join the information security team in raleigh, nc or fully remote! as a valued member of our team you will be focused on m&a (mergers and acquisition) and bcp/dr (business continuity planning and disaster recovery) domains amongst other infosec responsibilitiesIn this role, you will be responsible for ensuring security integration with mergers and acquisitionsAct as an infosec m&a lead and business liaison by planning, coordinating, and monitoring merger and acquisition projects from information security & risk perspectiveYou will work with newly acquired businesses and help them adopt arch information security controls and programThe individual will need to recommend mitigation strategies based on expertise and analytical skill and act swiftly on risk mitigation measures.
This position will work very closely with vp/divisional ciso and the it security and compliance organization and will be an integral part of the operations at archPlease note, this role may require up to 10% domestic or international travelJob responsibilities:
Assist with developing, delivering, and maintaining a consistent and effective gap analysis and bia (business impact analysis) to support business continuity governance program and disaster recovery services
Help coordinate testing and administer disaster recovery and resumption plans working closely with infrastructure and application support teams (on-prem and cloud (azure/aws/gcp) alike
Responsible for, and participate in, the annual functional recovery and disaster recovery exercise, along with managing critical event coordination and communications
Provide support and oversight for yearly disaster recovery exercise; help plan and coordinate the testing of recovery services and business support for multiple functional areas,
Track status of mergers and acquisition integration on key information security controlsWork with newly acquired business entities and help them integrate with arch security framework.
Assist recovery support and business staff during a disaster act as a coordinator during emergency situations
Responsible for helping develop, produce, and maintain disaster recovery management policies, standards, and guidelinesMaintain accurate and up to date documentation
Maintain call tree distribution process and employee contact information with quarterly testing and verification
Participate in audits and regulatory inquiries as necessary
Communicate and interface with support staff and senior management at all levels on the status of events and recovery services
Facilitate disaster recovery planning and testing
Day-to-day responsibilities:
Work with business, infrastructure and application teams alike to define, document, analyze and prioritize existing and emerging business requirements
Facilitate planning and coordination with information security teams to ensure security best practices are implemented and deliverables provide desired outcome
Execute projects and report progress, including consistent and effective communication, change management impact analysis, readiness and effectiveness, cutover and go-live supportThis includes managing escalation and mitigating risk
Ensure compliance with applicable bcp/dr policies and procedures
Required skills/experience:
Minimum 7 to 8 years of relevant experience in information security domain with special focus on merger & acquisition (m&a), disaster recovery and business continuity planning (bcp/dr), in addition to it software and infrastructure, networking, or security
Experience with m&a and disaster recovery process in cloud technologies such as azure/aws/gcp is highly desirable
Act as the primary point of contact for information securing requirements for all m&a’s
Deep knowledge of m&a integration strategies pertaining to information security, including its impact on arch
Develop trusted partnerships across multiple lines of business to ensure security requirements are included in the m&a process and plan joint integration initiatives
Distinct knowledge and understanding of rto, rpo, mttr and slas
Analytical background with an understanding of applications and infrastructure components with the ability to apply that knowledge to business continuity and disaster recovery.
Experience with iso 27001/iso27002, nist cybersecurity framework, cis controls and mitre att&ck
Understanding of cloud technologies and concepts
Desired skills/experience:
Demonstrated interpersonal, analytical, organizational, written, and verbal communication skills.
Demonstrated ability to communicate to all levels of an organization.
Solid understanding of and ability to speak authoritatively to security principles such as authentication/authorization, access control etc.
Strong written and verbal communication skills
Critical thinking, initiative, and communication skills are required.
Ability to deal with problems involving several concrete variables in standardized
Education:
Cissp is required but other industry certifications such as cisa, cism, mcse, ccna/p, cbcp, edrp, and others relevant to the subject matter are preferred.
Degree in computer science, information technology or equivalent field of study is preferred
The company: arch capital group ltdIs a bermuda-based company which provides insurance, reinsurance and mortgage insurance on a worldwide basisArch capital services llc provides support and expertise to entities across acgl to help them operate effectively and efficientlyArch is committed to helping its associates create what’s next by providing access to a variety of programs supporting your professional development and a culture that encourages innovation, collaboration and professional growthWe seek talent that thinks innovatively, values collaboration and will go the extra mile to serve our customers and develop our company.
