Cyber Security & Risk Analyst (Hybrid)

This position assesses security threats, risks, vulnerabilities, and exposures, identifies root causes of security issues, and drives remediation strategies to strengthen the organization's cybersecurity posture. The role partners with business, technology, and risk stakeholders to define requirements, lead cybersecurity projects and strategic initiatives, and manage key risks, dependencies, and outcomes. Additionally, the position develops executive-level communications and presentations that translate complex technical risks into clear business insights, enabling informed decision-making and alignment across leadership and delivery teams.

You will report to a Senior Manager, Digital and Technology Product (CISO).

In this hybrid role, you will be expected to work a minimum of 10 days per month from the office. Candidates should reside within approximately 35-50 miles of one of the following office locations: Madison, WI 53783 or Boston, MA 02110.

#LI-Hybrid

Candidates who require sponsorship will not be considered for this role.

Position Compensation Range:

$80,000.00 - $131,000.00

Pay Rate Type:

Salary

Compensation may vary based on the job level and your geographic work location. Relocation support is offered for eligible candidates.

What you will do and what we need:

• Executive Cyber Communications: Ability to translate complex cyber threats, risks, and intelligence into concise, business-focused communications for senior leadership and executives.
• Cyber Threat Intelligence Product Ownership: Own and prioritize the Cyber Threat Intelligence (CTI) backlog, roadmap, and stakeholder alignment to ensure the team delivers the highest-value security outcomes.
• Agile Leadership & Scrum Mastery: Lead sprint ceremonies, remove delivery blockers, improve team predictability, and drive continuous improvement across CTI operations.
• Cross-Functional Security Project Delivery: Successfully manage and execute cybersecurity initiatives that span multiple Information Security teams, driving measurable risk reduction and operational improvements.

Responsibilities:

• Conducts security and risk related analysis including data gathering, calculations, and formal reporting.
• Performs analysis of business and system requirements and capabilities (e.g., access controls) including data gathering, calculations, and formal reporting.
• Builds strong relationships with Peers across functions through collaborative analysis and reporting exercises.
• Participates in the assessment, remediation, and tracking of information technology risks.
• Executes compliance audits including risk assessment, audit scope, identifying and testing processes/controls and participate in the development of specific recommendations.
• Analyzes existing issues and incidents and determines action in line with risk management strategy and standards.
• Monitors any legal or regulatory non-compliance as part of the divisional risk management process.
• Coordinates completion and review of divisional risk and control self-assessments and associated documentation to ensure they meet standards.

Specialized Knowledge, Skills, and Education Requirements

• Experience in a SAFe / Agile framework a plus.
• Demonstrated experience providing customer-driven solutions, support or service.
• Basic knowledge of security analysis processes and standards for conducting and reporting security analysis to stakeholders.
• Basic knowledge and understanding of IT Risk Management and/or Information Systems Auditing.
• Basic knowledge and understanding of IT risk and control frameworks.
• Basic knowledge and understanding of the process to conduct IT risk and control assessments.
• Basic knowledge and understanding of IT risk management and reporting.
• Basic knowledge and understanding of risk management methods, standards, processes, governance models, and industry standard risk analysis approaches.
• Travel Requirements - up to 10%.

Additional Information

• To ensure a strong start, all employees participate in our New Employee Orientation during their first week.  This experience is held in person at our Madison, WI Headquarters or one of our AmFam core locations to help you connect with our mission, meet key team members and build relationships that support your growth.  At times, sessions may be delivered virtually based on scheduling and availability. 
• Offer to selected candidate will be made contingent on the results of applicable background checks
• Offer to selected candidate is contingent on signing a non-disclosure agreement for proprietary information, trade secrets, and inventions
• Sponsorship will not be considered for this position unless specified in the posting

We provide benefits that support your physical, emotional, and financial wellbeing. You will have access to comprehensive medical, dental, vision and wellbeing benefits that enable you to take care of your health. We also offer a competitive 401(k) contribution, a pension plan, an annual incentive, 9 paid holidays and a paid time off program (23 days accrued annually for full-time employees). In addition, our student loan repayment program and paid-family leave are available to support our employees and their families. Interns and contingent workers are not eligible for American Family Insurance Group benefits.

We are an equal opportunity employer. It is our policy to comply with all applicable federal, state and local laws pertaining to non-discrimination, non-harassment and equal opportunity. We also consider qualified applicants with criminal histories, consistent with applicable federal, state and local law.

American Family Insurance is committed to the full inclusion of all qualified individuals. If a reasonable accommodation is needed to participate in the job application or interview process, to perform essential job functions, and/or to receive other benefits and privileges of employment, please email [email protected] to request a reasonable accommodation.

#LI-DB1