Cybersecurity GRC Analyst

Description: Who are we?

Western National Insurance Group is a private mutual insurance company with over 120 years of experience serving customers' property-and-casualty insurance needs in the Midwestern, Northwestern, and Southwestern United States. Known as “The Relationship Company®,” we define success as a measure of the relationships we’ve built over time. In everything that we do, we know that delivering a friendly and helpful interaction makes for a better experience for everyone involved. That’s the power of “nice”. At Western National, nice is something we work to bring to every person and organization with whom we partner and serve.

Does this opportunity interest you?

Western National is seeking a Cybersecurity GRC Analyst to join our team!

The individual in this role will have the opportunity to strengthen the organization’s information security program by supporting regulatory compliance, managing third-party security risk, advancing security framework maturity, leading security awareness initiatives, and delivering meaningful security metrics that enable informed business decisions.

What are the responsibilities and opportunities of this role?

• Supports insurance-related regulatory compliance by maintaining audit-ready documentation and coordinating timely and accurate regulatory filings across multiple states.
• Partners with vendor management, legal, and business stakeholders to integrate security requirements throughout the vendor lifecycle.
• Performs security risk assessments of third-party vendors and service providers and tracks remediation activities.
• Maintains the vendor risk register and monitors progress toward risk mitigation objectives.
• Serves as the Information Security Team's primary point of contact for state insurance departments, auditors, and compliance-related inquiries.
• Designs, coordinates, and executes the organization's security awareness training program.
• Develops targeted awareness campaign...