Primary DetailsTime Type: Full time Worker Type: Employee The Opportunity: QBE is seeking an experienced Information Security Consultant to lead transformational change in cyber and information security risk management across our North America operations. In this role, you will conduct comprehensive security assessments, identify and mitigate current and emerging risks, and recommend effective short- and long-term security controls. You will collaborate closely with application development, infrastructure, and internal security teams, as well as global partners, to ensure the protection of QBE’s systems and data from sophisticated cyber threats. The ideal candidate will bring deep technical expertise, a proactive and innovative mindset, and the ability to deliver strategic insights that address root-cause issues, ensure compliance, reduce risk, and drive meaningful business outcomes in a fast-paced, collaborative environment. • Location: Flexible on location • Work Arrangement: This role can be remote or hybrid(where you will be expected to be in the office 2-3 days per week.) based location of candidate. • The salary range for this role is between $112,500-$210,500. Your New Role: • Lead the development and delivery of a robust cyber and information security capability by partnering with stakeholders to proactively identify, assess, and mitigate risks across the organization. • Drive the implementation and continuous improvement of a mature cybersecurity practice through the adoption of effective policies, standards, processes, and templates that enhance risk management and organizational resilience. • Align security frameworks and standards with enterprise business and technology strategies to ensure cohesive and scalable security solutions. • Determine security requirements by evaluating business strategies and ensuring security standards are embedded throughout the software development lifecycle. • Define and maintain security requirements for software development, balancing business functionality with cybersecurity best practices. • Collaborate with Cyber Security, Architecture, and supporting teams to define security architecture components that proactively mitigate risks across both application and cloud infrastructure environments • Provide security leadership and support across both application-level and cloud infrastructure projects, ensuring alignment with enterprise security goals. • Conduct comprehensive system security and vulnerability assessments, risk analyses, and architectural reviews to identify integration challenges and emerging threats. • Build and maintain strong cross-functional relationships to identify root-cause issues, provide actionable guidance, and drive sustained reduction of threats and vulnerabilities. • Represent the security function in architecture review boards and project planning forums, ensuring security is embedded from the outset of all initiatives. Required Experience/Qualifications: • Extensive background in information security and IT risk management, with a focus on security, performance, and reliability. • Experienced in conducting cyber risk assessments and implementing effective security solutions. • Proven ability to collaborate with Application Development, Infrastructure, and Project teams to align on security goals and meet deadlines. • Solid understanding of security protocols, cryptography, authentication, and authorization. • Familiar with industry-recognized frameworks such as ISO 27001 and NIST Cybersecurity Framework (CSF). • Adept at communicating and enforcing security measures across diverse teams and stakeholders. • Broad technical knowledge across security, networking, web applications, firewalls, vulnerability management, and risk management. • Self-motivated and adaptable, with the ability to work independently in fast-paced, evolving environments. Preferred Qualifications/Experience: • Over 7 years of experience in Information Security consulting roles. • Hands-on experience with DevSecOps practices and tools such as SAST, DAST, and SCA. • Experienced in developing reference security architectures. • Experienced working in a regulated financial setting, ensuring adherence to data protection, risk management, and regulatory standards. • Strong understanding of security controls in cloud environments, particularly arenaflex Azure. • Proficient in working with major cloud platforms including Azure, AWS, and arenaflex Cloud. • Excellent written and verbal communication skills along with business acumen and a commercial outlook. • Good working knowledge of current IT risks and mitigation strategies. Compensation Package: The salary range for this role is provided above. This is the national range for location(s) listed. The salary offer will be decided based on the role's complexity, its location, and the candidate’s professional background, including their education and experience. Beyond the base salary, regular full-time and part-time employees will also be eligible for QBE’s annual discretionary bonus plan based on business and individual performance. We encourage all candidates to apply, even if their salary expectations fall outside of this range, as we are committed to finding the right fit for our team. QBE Benefits: We offer a range of benefits to help provide holistic support for your work life, whatever your circumstances. As a QBE employee you will have access to: • Hybrid Working – a mix of working from home and in the office • 22 weeks of paid leave for family growth, with 12 weeks available to all parents on a gender-equal basis • Competitive 401(k) program with company match up to 8% • Well-being program including holistic wellbeing coaching, gym membership, confidential counselling, financial and legal advice • Tuition Reimbursement for professional certifications, and continuing education • Employee Network and Community – QBE actively supports six Employee Networks, and many ways to give back to your community To learn more, click here: Benefits | QBE US. Why QBE? What if you could have a positive impact – at work and in the world? At QBE, we’re enabling a more resilient future – for our customers, communities, environment, and for our people. We’re building momentum to achieve something significant and know our people are at the center of our success. Our industry offers interesting and varied careers where you can help people to protect what matters most. As part of the QBE team, you’ll get to spend every day working with people who are passionate, talented and kind. And our international scale means we’re big enough for your ambitions, yet small enough for you to make a real impact. Join us now, so you can be part of our success – and we can be part of yours! QBE is committed to providing reasonable accommodation to, among others, individuals with disabilities and disabled veterans. If you need an accommodation because of a disability to search and apply for a career opportunity with QBE, please inform our Talent Acquisition team to let us know the nature of your accommodation request and your contact information. Equal Employment Opportunity: QBE provides equal employment opportunities to applicants and employees without regard to race; color; gender; gender identity; sexual orientation; religious practices and observances; national origin; pregnancy, childbirth, or related medical conditions; protected veteran status; or disability or any other legally protected status. This position is not eligible for visa sponsorship. Applicants must be authorized to work in the United States on a full-time basis without the need for current or future sponsorship. Supplementary information Skills: Client Counseling, Commercial Acumen, Conflict Management, Critical Thinking, Customer Service, Cybersecurity, Cyber Security Governance, Cyber Security Management, Individual Resilience, Information Security, Intentional collaboration, Managing performance, Problem Solving, Quality Control (QC), Risk Management How to Apply: To submit your application, click "Apply" and follow the step by step process. Equal Employment Opportunity: QBE is an equal opportunity employer and is required to comply with equal employment opportunity legislation in each jurisdiction it operates. Apply tot his job