IT Security Ambassador - Project Manager, Hybrid

Crum & Forster • New York, New York, United States • 3w ago

Crum & Forster Company Overview

Crum & Forster (C&F) with a proud history dating to 1822, provides specialty and standard commercial lines insurance products through our admitted and surplus lines insurance companies. C&F enjoys a financial strength rating of "A" (Excellent) by AM Best and is proud of our superior customer service platform. Our claims and risk engineering services are recognized as among the best in the industry.

Our most valuable asset is our people: more than 2000 employees in locations throughout the United States. The company is increasingly winning recognition as a great place to work, earning several workplace and wellness awards, including the October 2023 Great Place to Work® Award for our employee-first focus and our steadfast commitment to diversity, equity and Inclusion.

C&F is part of Fairfax Financial Holdings, a global, billion dollar organization. For more information about Crum & Forster, please visit our website: www.cfins.com.

Job Description

Seneca Insurance is a specialty property and casualty insurer, part of Crum & Forster (Fairfax Financial Holdings, Inc.), which takes a creative and disciplined approach to providing profitable insurance solutions. Our most valuable asset is our staff - 300+ employees, and growing, in locations throughout the United States - committed to delivering customized products with superior customer service. For more information about Seneca, please visit our website: http://www.cfins.com/seneca/.

What you will do for C&F:

This is a hybrid role with working locations in NYC, Jersey City, or Morristown.

What you will do for C&F:

The Seneca Security Ambassador will represent Seneca, liaising with the Company’s Cyber and Compliance Teams identifying, planning, solutioning, and leading Seneca’s remediation efforts for relevant vulnerabilities detected in applications and cloud workloads, as well as:

Work with the team to build and develop a culture of security to support Seneca’s digital growth. Provide a weekly report to the team on any security threats they need to be aware of
Interpret, validate, prioritize, and lead efforts to resolve all SAST, DAST, and Penetration Testing vulnerabilities.
Work with team to ensure the implementation of security controls for containers and container orchestration services.
Participate, lead in security assessments and provide guidance and best practices for implementing security controls for cloud environments, networks, systems, and applications.
Monitor security throughout various stages of the CI/CD pipeline and work with the development team to provide security requirements and resolutions.
Perform threat and risk modeling for new and existing applications and cloud environments.
Help build a security focused culture by partnering with various business units and stakeholders.
Complete configuration of Palo Alto Firewall to address upcoming mandated Security requirements
Support security training and awareness for application development teams.
Work with business to understand Cyber Risks and Compliance requirements

The Project Manager will be responsible for the overall coordination and monitoring of Business and Cyber/Information Security related projects and initiatives

Use the most appropriate project management methodology to plan, manage, and deliver a broad range of solutions on complex problems involving various major elements.
Work with Senior IT Management to define implementation goals and integrate with existing IT roadmaps.
Determine and manage tasks, issues, risks, and action items, proactively identify operational and strategic problems and work with the team to implement solutions.
Schedule and facilitate all communications, meetings, and decision-making processes, closely work with other subject matter experts in developing the most efficient and effective processes
Monitor progress and performance and help teams to make improvements.
Lead and facilitate team meetings, e.g., daily stand ups, (sprint) planning, (sprint) review, backlog grooming, monthly team meetings, incremental planning and retrospectives. Represent and present content practices to a diverse audience, and persuade others regarding support for business needs
Planning and organizing demos and product/system testing.
Contribute to projects where needed, including analysis, testing, and documentation.
Ensuring proper use of collaborative processes and removing impediments for the team.
Preparing and presenting status reports to senior management.

What you will bring to C&F:

Bachelor’s degree in a technical discipline or equivalent experience.
1-3 years Information Security experience.
1-3 years Application and/or Cloud Security experience
Understanding of relevant application and cloud cyber threats and risks.
Knowledge of security frameworks such as OWASP Top 10 or SANS Top 20.
2+ years in a Project Management or Scrum Master role, including 1 year in a Cybersecurity or IT focused Project Management role.
Strong knowledge of Atlassian Confluence and Jira or other project management applications
Proficiency in effectively driving change and garnering support from stakeholders and leadership
Working knowledge of agile methodology, techniques, and frameworks, such as Scrum or Kanban to deliver solutions.
Proven experience in successfully managing multiple projects at the same time
Experience with infrastructure and networking projects; tech savvy
Ability to work within a distributed cross-functional environment that employs agile principals and a team mentality.
Exceptional ability to articulate difficult ideas and concepts through clear and concise verbal and/or written communication
PMP, Scrum Master, or other related designation desired.
Experience working in cross-organizational teams.
Strong English written and verbal communications skills and stakeholder management
Will abide by departmental policies and procedures, including authority levels, to comply with Seneca’s risk management controls.

And at least 2 of the following:

Knowledge of container security and implementing container orchestration.
Knowledge or experience deploying and/or maintaining security and compliance in AWS, Azure, and GCP cloud environments.
Knowledge or experience conducting source code security reviews for various languages including, but not limited to: Java, .Net (C#, VB#, JavaScript, Web Apps)
Knowledge of DevSecOps and CI/CD principles.
Knowledge of secure architecture concepts
Any relevant certifications such as: CEH, Security+, any AWS or Azure certifications

What C&F will bring to you

Competitive compensation package

Generous 401K employer match

Employee Stock Purchase plan with employer matching

Generous Paid Time Off

Excellent benefits that go beyond health, dental & vision. Our programs are focused on your whole family’s wellness, including your physical, mental and financial wellbeing

A core C&F tenet is owning your career development, so we provide a wealth of ways for you to keep learning, including tuition reimbursement, industry-related certifications and professional training to keep you progressing on your chosen path

A dynamic, ambitious, fun and exciting work environment

We believe you do well by doing good and want to encourage a spirit of social and community responsibility, matching donation program, volunteer opportunities, and an employee-driven corporate giving program that lets you participate and support your community.

At C&F you will BELONG

We value inclusivity and diversity. We are committed to equal employment opportunity and welcome everyone regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity, or Veteran status. If you require special accommodation, please let us know.

For California Residents Only: Information collected and processed as part of your career profile and any job applications you choose to submit are subject to our privacy notices and policies, visit https://www.cfins.com/onlineprivacypolicy/ca/noticeatcollection/ for more information.

Crum & Forster is committed to ensuring a workplace free from discriminatory pay disparities and complying with applicable pay equity laws. Salary ranges are available for all positions at this location, taking into account roles with a comparable level of responsibility and impact in the relevant labor market and these salary ranges are regularly reviewed and adjusted in accordance with prevailing market conditions. The annualized base pay for the advertised position, located in the specified area, ranges from a minimum of $68,200.00 to a maximum of $106,500.00. The actual compensation is determined by various factors, including but not limited to the market pay for the jobs at each level, the responsibilities and skills required for each job, and the employee’s contribution (performance) in that role. To be considered within market range, a salary is at or above the minimum of the range. You may also have the opportunity to participate in discretionary equity (stock) based compensation and/or performance-based variable pay programs.

Apply