Qureos Mentor

Berkshire Hathaway Specialty Insurance

<div><div><b>Who are we?</b></div><div></div><div><br>
A strategic and trusted insurance partner, Berkshire Hathaway Specialty Insurance (BHSI), provides a broad range of commercial property, casualty and specialty insurance coverages and outstanding service to customers and brokers around the world. Part of Berkshire Hathaway&rsquo;s insurance operations, we bring our solutions to market with our stellar brand name, top-rated balance sheet, and the expertise of our global team of professionals, who exude excellent capabilities and strong character.</div><div></div><div><br>
We are a values-based organization where respect, integrity, excellence, collaboration, and passion define who we are and how we do business. We value diversity of backgrounds, experience, and perspectives and strive to foster an inclusive environment that enables all our team members to bring their best selves to work. We are one team committed to building a culture where every teammate has the opportunity to contribute and be recognized. Want to be part of the team building the finest property, casualty and specialty lines insurance company in the world?</div><div></div><div><br>
Learn more about our unique culture and history.</div><div></div><div><b><br>
Job Opportunity:</b></div><div></div><div><br>
Berkshire Hathaway Specialty Insurance (BHSI) has an exciting opportunity for a new team member to join their Boston-based IT Governance Risk Audit &amp; Compliance (GRAC) team as an IT Senior Risk Analyst. In this newly created role, the IT Senior Risk Analyst will support and mature the IT Risk Management pillar, ensuring technology risks are proactively identified, assessed, communicated, and monitored across the enterprise. This role will build strong partnerships with Technology leadership and collaborate closely with teams across BHSI to evaluate our IT risk posture, provide independent challenge, and recommend practical risk‑reducing actions aligned with our established risk appetite. If you're passionate about elevating enterprise IT risk practices, driving meaningful change, and growing your career as a key contributor to our evolving global IT risk program, we&rsquo;re interested in speaking with you.</div><div></div><div><b><br>
Duties &amp; Responsibilities:</b></div><div></div><div><br>
<ul><li>
Lead risk identification, risk assessment, and ongoing monitoring; maintain the IT risk register and ensure risks map to business objectives and risk appetite/tolerances.</li><li>
Drive Risk and Control Self‑Assessments (RCAs) with different risk and control owners; advise on control design for identity &amp; access, change/release, resiliency/DR, cloud security, data protection, and vulnerability management.</li><li>
Define and socialize KRIs/KPIs, risk dashboards, trends, and heat maps; deliver clear status to Technology leadership, and key stakeholders.</li><li>
Partner with Vendor Risk Management Team to evaluate critical vendors (including AI‑enabled services), review SOC reports/certifications, assess control gaps, and track remediation/compensating controls through closure.</li><li>
Track risk issues, action plans, and target dates; validate remediation and retest where needed; participate in lessons‑learned and scenario exercises.</li><li>
Provide support to our offices from both a U.S. and global perspective (i.e., Asia, Middle East, UK, Europe, Australasia, etc.) regarding the fulfillment of IT risk related requests and obligations.</li><li>
Assess AI/automation use cases for explainability, privacy, security, and bias risk; ensure appropriate documentation, monitoring, and governance are in place.</li><li>
Educate teams on risk expectations, evidence quality, and the &ldquo;why&rdquo; behind controls; help embed risk thinking into delivery and operations.</li><li>
Attend/participate in e-learning training sessions to increase background knowledge of the ever-evolving IT regulatory landscape.</li></ul></div><div></div><div><b><br>
Qualifications, Skills and Experience:</b></div><div></div><div><br>
<ul><li>
6+ years of experience in IT risk, IT audit/compliance, or cyber GRC.</li><li>
Experience running RCSAs, defining KRIs/KPIs, and presenting risk insights to senior stakeholders.</li><li>
Strong documentation skills, including writing risk narratives, control designs, control matrices, testing procedures, and remediation plans.</li><li>
Effective communication and partnership skills; able to challenge constructively and receive challenge professionally.</li><li>
Experience conducting vendor risk reviews, including SOC 2 analysis, control gap identification, and remediation follow‑up.</li><li>
Solid background knowledge of major risk and control frameworks (Technology, Cyber, Enterprise), such as NIST CSF, COSO ERM, COBIT, etc.</li><li>
Working knowledge of U.S. IT regulations (e.g., SOX, CCPA/CPRA, PCI, NY‑DFS) is recommended.</li><li>
Familiarity with global regulatory frameworks (e.g., GDPR, CBI, DORA, MAS, APRA, BaFin) is preferred but not required.</li></ul></div><div><ul><li>
Ability to work in a team-based environment and communicate effectively and efficiently with others domestically and globally.</li><li>
Experience with GRC tools such as Workiva, AuditBoard, ServiceNow, Drata, Vanta, or similar platforms is a plus.</li><li>
AI experience is a plus, including an understanding of AI risks, responsible AI concepts, or emerging AI regulatory requirements.</li><li>
Professional certifications such as CRISC, CISA, CISM, CISSP, or ISO/IEC 27001 Lead Implementer/Lead Auditor (or equivalent) are a plus.</li></ul></div><p></p><div><b><br>
BHSI Offers:</b></div><br>
<div></div><ul><li>
A competitive package and exciting growth opportunities for career-oriented teammates.</li><li>
A dynamic, action oriented, and thoughtful environment centered on always doing the right thing for our customers, teammates and our other stakeholders.</li><li>
A purposely non-bureaucratic organization that embraces simplicity over complexity and emphasizes individual excellence in a team framework.</li><li>
Benefits that support your life and well-being, which include:<ul><li>
Comprehensive Health, Dental and Vision benefits.</li><li>
Disability Insurance (both short-term and long-term).</li><li>
Life Insurance (for you and your family).</li><li>
Accidental Death &amp; Dismemberment Insurance (for you and your family).</li><li>
Flexible Spending Accounts.</li><li>
Health Reimbursement Account.</li><li>
Employee Assistance Program.</li><li>
Retirement Savings 401(k) Plan with Company Match.</li><li>
Generous holiday and Paid Time Off.</li><li>
Tuition Reimbursement.</li><li>
Paid Parental Leave.</li></ul></li></ul><div></div><div><i><br>
The base salary range for this position in Boston is $95,000.00 to $125,000.00, along with annual bonus eligibility. Total compensation for a candidate is determined by their relevant skills, location, and experience. We value our teammates &ndash; both their capabilities and character &ndash; as demonstrated by our amazing culture.</i></div><div></div><div><br>
NOTE: Compensation will be commensurate with experience. This job description is not intended to be all-inclusive. Team Member may perform other related duties as negotiated to meet the ongoing needs of the organization.</div></div>

Senior IT Risk Analyst

<div><div><b>Who are we?</b></div><div></div><div><br>
A strategic and trusted insurance partner, Berkshire Hathaway Specialty Insurance (BHSI), provides a broad range of commercial property, casualty and specialty insurance coverages and outstanding service to customers and brokers around the world. Part of Berkshire Hathaway&rsquo;s insurance operations, we bring our solutions to market with our stellar brand name, top-rated balance sheet, and the expertise of our global team of professionals, who exude excellent capabilities and strong character.</div><div></div><div><br>
We are a values-based organization where respect, integrity, excellence, collaboration, and passion define who we are and how we do business. We value diversity of backgrounds, experience, and perspectives and strive to foster an inclusive environment that enables all our team members to bring their best selves to work. We are one team committed to building a culture where every teammate has the opportunity to contribute and be recognized. Want to be part of the team building the finest property, casualty and specialty lines insurance company in the world?</div><div></div><div><br>
Learn more about our unique culture and history.</div><div></div><div><b><br>
Job Opportunity:</b></div><div></div><div><br>
Berkshire Hathaway Specialty Insurance (BHSI) has an exciting opportunity for a new team member to join our Boston-based IT Governance Risk Audit and Compliance (GRAC) team as a Senior IT Compliance Analyst. In this role, the IT Senior Compliance Analyst will take an active role in the execution of our IT audit and compliance framework, while collaborating closely with both internal and external partners. This position offers the chance to make a significant impact, working with external global regulators and collaborating with internal regional legal and compliance leaders across regions from an enterprise-wide vantage point. If you're passionate about driving meaningful change, growing your career, and helping lead an evolving global IT audit and compliance program, we&rsquo;re interested in speaking with you.</div><div></div><div><b><br>
Duties &amp; Responsibilities:</b></div><div></div><div><br>
<ul><li>
Lead in executing IT audit/compliance activities, and follow up with responsible parties regarding outstanding requests, and/or questions.</li><li>
Maintain, organize, and store audit evidence in preparation for upcoming scheduled audits.</li><li>
Conduct audit readiness assessments (i.e., health checks) and assess the effectiveness of current controls and processes in place.</li><li>
Lead in developing, implementing, and executing additional internal IT audit/compliance activities.</li><li>
Coordinate with team members regarding the remediation status of closing out identified audit gaps and ensuring compensating controls are implemented.</li><li>
Review third-party service providers/vendors as part of IT due diligence, including assessing vendor control environment, reviewing SOC reports (i.e., SOC 2 type 2 reports), validating security certifications, identifying control gaps, and ensuring required remediation or compensating controls.</li><li>
Analyze and support compliance with global IT regulatory authorities (i.e., GDPR, CBI, DORA, MAS, APRA, BAFIN, etc.) and coordinate with individuals to ensure controls are in place to meet requirements.</li><li>
Provide support to our offices from both a U.S. and global perspective (i.e., Asia, Middle East, UK, Europe, Australasia, etc.) regarding the fulfillment of external audit requests and obligations.</li><li>
Attend/participate in e-learning training sessions to increase background knowledge of the ever-evolving IT regulatory landscape.</li><li>
Support in AI risk and governance oversight to ensure responsible and compliant use of AI technologies.</li></ul></div><div></div><div><b><br>
Qualifications, Skills and Experience:</b></div><div></div><div><br>
<ul><li>
6+ years of experience working in an IT audit/compliance function with a general understanding (at minimum) in several of the IT audit/compliance topics listed below:</li><li>
Active Directory, password standards, user access provisioning/deprovisioning, user access reviews, change management, batch jobs/backups, disaster recovery, service accounts, patch management, risk assessment.</li><li>
Software development and IT operations knowledge to assess the planning and ongoing maintenance of DevSecOps practices and Application security.</li><li>
Knowledge of cloud governance, cloud technology and cloud security is a plus.</li></ul></div><div><ul><li>
Solid background knowledge of US domestic IT regulations (i.e., SOX, CCPA, PCI, NY-DFS etc.) is recommended.</li><li>
Familiarity with global regulatory frameworks (e.g., GDPR, CBI, DORA, MAS, APRA, BaFin) is preferred but not required.</li><li>
Ability to work in a team-based environment and communicate effectively and efficiently with others domestically and globally.</li><li>
Experience with GRC tools such as Workiva, AuditBoard, ServiceNow, Drata, Vanta, or similar platforms is a plus.</li><li>
AI experience is a plus, including an understanding of AI risks, responsible AI concepts, or emerging AI regulatory requirements.</li><li>
Professional certifications such as CRISC, CISA, CISM, CISSP, or ISO/IEC 27001 Lead Implementer/Lead Auditor (or equivalent) are a plus.</li></ul></div><div></div><div><b><br>
BHSI Offers:</b></div><br>
<div></div><ul><li>
A competitive package and exciting growth opportunities for career-oriented teammates.</li><li>
A dynamic, action oriented, and thoughtful environment centered on always doing the right thing for our customers, teammates and our other stakeholders.</li><li>
A purposely non-bureaucratic organization that embraces simplicity over complexity and emphasizes individual excellence in a team framework.</li><li>
Benefits that support your life and well-being, which include:<ul><li>
Comprehensive Health, Dental and Vision benefits.</li><li>
Disability Insurance (both short-term and long-term).</li><li>
Life Insurance (for you and your family).</li><li>
Accidental Death &amp; Dismemberment Insurance (for you and your family).</li><li>
Flexible Spending Accounts.</li><li>
Health Reimbursement Account.</li><li>
Employee Assistance Program.</li><li>
Retirement Savings 401(k) Plan with Company Match.</li><li>
Generous holiday and Paid Time Off.</li><li>
Tuition Reimbursement.</li><li>
Paid Parental Leave.</li></ul></li></ul><div></div><div><i><br>
The base salary range for this position in Boston is $95,000.00 to $125,000.00, along with annual bonus eligibility. Total compensation for a candidate is determined by their relevant skills, location, and experience. We value our teammates &ndash; both their capabilities and character &ndash; as demonstrated by our amazing culture.</i></div><div></div><div><br>
NOTE: Compensation will be commensurate with experience. This job description is not intended to be all-inclusive. Team Member may perform other related duties as negotiated to meet the ongoing needs of the organization.</div></div>

Senior IT Compliance Analyst

Join Berkshire Hathaway Specialty Insurance and explore 2   exciting career opportunities. They're hiring for various roles with options for remote or on-site work. Apply today and become part of their innovative team.

Berkshire Hathaway Specialty Insurance

About Company

Senior IT Risk Analyst

Senior IT Compliance Analyst