Job description
The world isn’t standing still, and neither is Allstate. We’re moving quickly, looking across our businesses and brands and taking bold steps to better serve customers’ evolving needs. That’s why now is an exciting time to join our team. You’ll have opportunities to take risks, challenge the status quo and shape the future for the greater good.
You’ll do all this in an environment of excellence and the highest ethical standards – a place where values such as integrity, inclusive diversity and accountability are paramount. We empower every employee to lead, drive change and give back where they work and live. Our people are our greatest strength, and we work as one team in service of our customers and communities.
Everything we do at Allstate is driven by a shared purpose: to protect people from life’s uncertainties so they can realize their hopes and dreams. For more than 89 years we’ve thrived by staying a step ahead of whatever’s coming next – to give customers peace of mind no matter what changes they face. We acted with conviction to advocate for seat belts, air bags and graduated driving laws. We help give survivors of domestic violence a voice through financial empowerment. We’ve been an industry leader in pricing sophistication, telematics, digital photo claims and, more recently, device and identity protection.
We are the Good Hands. We don’t follow the trends. We set them.
Job Summary
The Asset Risk Profile Consultant is part of Allstate Information Security (AIS) within Governance, Risk, & Compliance (GRC). This role will be accountable for the execution of Asset Risk Profiles (ARP) on assets across the enterprise and our family of companies to derive risk impact ratings. This individual will directly contribute to the overall GRC program by providing asset impact ratings that drive scoping and prioritization for control assessments and implementation, as well as providing consulting to key business partners around Asset Risk Profiling. The individual stepping into this role will directly contribute to the maturity and automation of our ARP program and methodology to ensure the efficacy and streamlining to drive high business value, quality and reduced cycle times.
The Asset Risk Profile Consultant will collaborate across security teams and business partners to assess and report impact ratings that assets have on the enterprise and identify process improvement areas. A broad range of professional skills, along with strong interpersonal skills, will be required for problem-solving, and collaboration with virtual cross-functional work groups. This individual is expected to develop into a subject matter expert and trusted advisor that can clearly articulate Allstate security policies, standards and risks to assets to both technical and business audiences alike.
Key Responsibilities
- Execute on assigned asset risk profiles to ensure the transparent reporting of asset impact ratings and prioritization that drive risk-based security decisions
- Directly support the strategic maturity of cyber profiling to drive automation and reduction in cycle times
- Execute on agreed upon methodology to identify, assess, and report on asset risk profile for all asset tiers within defined service level agreement timelines
- Recommend operationally feasible and cost-effective solutions to reduce cycle times
- Monitor, maintain, and measure coverage of asset risk profiles for overall enterprise information security controls library
- Support the governance of the risk profile rating scale to ensure the accurate calculation of asset risk impacts
- Partner directly with key stakeholders to drive data quality and accuracy to improve the overall effectiveness of the process
- Help our partners proactively maintain a strong cybersecurity preparedness and response posture
- Support Archer GRC tool governance for asset risk profile security workflow and update requirements
- Drive key stakeholder education to support the continued engagement and awareness of program requirements
- Help facilitate review of changes in company processes, standards and technology to ensure the effectiveness and alignment to asset risk profile rating procedures
- Build effective working relationships, making sound decisions, successfully making changes, initiating action and achieving results as a trusted advisor
Job Qualifications
- 2+ years of Information Security/IT risk or compliance, consulting, data analytics and/or security engineering or architecture experience or IT audit experience
- Relevant postsecondary education and/or industry standard certifications preferred (i.e., CISA, CISM, CISSP, CompTIA, SANS Institute/GIAC, PCIP)
- Strong analytical and organizational skills, ability to effectively manage multiple, competing projects/priorities while achieving targeted completion results
- Effective written, verbal communication skills capable of tailoring communication style to audience
- Ability to effectively work with technical and non-technical resources, able to partner with multiple business groups, managers, and network architects or engineers
- Should be a self-starter who demonstrates complete ownership over assigned objectives and is able to work independently in a "semi-structured" environment, but also recognizes when guidance is needed from program management and delivery leaders
- Ability to write quality documentation and/or presentations is a must
- Ability to work across organizational boundaries and levels is a must
- Proficient in MS Office Pro Suite and SharePoint
- Good understanding of IT security best practices by applying depth and breadth of expertise in multiple domains and security disciplines
- Working knowledge or exposure to some of the following: PCI DSS 3.2, HIPAA applicable security / privacy controls, Sarbanes-Oxley (SOX) 404, ISO/IEC 27000 family of standards, NIST 800-53, NIST cybersecurity framework, and COBIT
The candidate(s) offered this position will be required to submit to a background investigation, which includes a drug screen.
Good Work. Good Life. Good Hands®.
As a Fortune 100 company and industry leader, we provide a competitive salary – but that’s just the beginning. Our Total Rewards package also offers benefits like tuition assistance, medical and dental insurance, as well as a robust pension and 401(k). Plus, you’ll have access to a wide variety of programs to help you balance your work and personal life - including a generous paid time off policy. For a full description of Allstate's benefits, visit https://www.allstate.jobs/benefits/.
Learn more about life at Allstate. Connect with us on Twitter, Facebook, Instagram and LinkedIn or watch a video.
Allstate generally does not sponsor individuals for employment-based visas for this position.
Effective July 1, 2014, under Indiana House Enrolled Act (HEA) 1242, it is against public policy of the State of Indiana and a discriminatory practice for an employer to discriminate against a prospective employee on the basis of status as a veteran by refusing to employ an applicant on the basis that they are a veteran of the armed forces of the United States, a member of the Indiana National Guard or a member of a reserve component.
For jobs in San Francisco, please click “here” for information regarding the San Francisco Fair Chance Ordinance.
For jobs in Los Angeles, please click “here” for information regarding the Los Angeles Fair Chance Initiative for Hiring Ordinance.
To view the “EEO is the Law” poster click “here”. This poster provides information concerning the laws and procedures for filing complaints of violations of the laws with the Office of Federal Contract Compliance Programs
To view the FMLA poster, click “here”. This poster summarizing the major provisions of the Family and Medical Leave Act (FMLA) and telling employees how to file a complaint.
It is the Company’s policy to employ the best qualified individuals available for all jobs. Therefore, any discriminatory action taken on account of an employee’s ancestry, age, color, disability, genetic information, gender, gender identity, gender expression, sexual and reproductive health decision, marital status, medical condition, military or veteran status, national origin, race (include traits historically associated with race, including, but not limited to, hair texture and protective hairstyles), religion (including religious dress), sex, or sexual orientation that adversely affects an employee's terms or conditions of employment is prohibited. This policy applies to all aspects of the employment relationship, including, but not limited to, hiring, training, salary administration, promotion, job assignment, benefits, discipline, and separation of employment.
offroadmanagementgroup.com is the go-to platform for job seekers looking for the best job postings from around the web. With a focus on quality, the platform guarantees that all job postings are from reliable sources and are up-to-date. It also offers a variety of tools to help users find the perfect job for them, such as searching by location and filtering by industry. Furthermore, offroadmanagementgroup.com provides helpful resources like resume tips and career advice to give job seekers an edge in their search. With its commitment to quality and user-friendliness, offroadmanagementgroup.com is the ideal place to find your next job.