Global Cyber Security Governance Specialist

The Opportunity: The Security Governance & Assurance Specialist supports QBE's cyber security objectives by providing clear, data-driven insights into the performance of key controls and the organization's overall security posture. The role is responsible for tracking and analyzing control metrics, surfacing risk signals, and contributing to reporting for governance forums, senior stakeholders, and regulatory engagements.

Working as part of the Group Cyber Security function, the role acts as a central point for integrating control performance data into meaningful narratives that support decision-making and risk prioritization. As the function continues to mature, the role will also support targeted, evidence-based assurance activities that complement formal risk and control assessments and strengthen overall confidence in the design and effectiveness of QBE's cyber controls.

• Location: New York, New York

• Work Arrangement: This role is a hybrid role, where you will be expected to be in the office 2-3 days per week.

• The salary range for this role is $140,500.00 and $210,500.00, based on experience.

Your New Role

• Monitor and analyze cyber control performance metrics and key risk indicators (KRIs) to identify trends, emerging risks, and opportunities for control uplift.

• Develop and maintain reporting artefacts (e.g. dashboards, briefings, governance packs) that clearly communicate security posture and risk insights to a range of stakeholders, including senior management and governance forums.

• Translate complex control and risk data into actionable insights, enabling stakeholders to make informed trade-offs aligned with QBE's risk appetite and strategic priorities.

• Collaborate with control owners, delivery teams, and second-line functions to improve the quality, clarity, and consistency of control performance data and reporting inputs.

• Support the integration of control telemetry and other evidence-based measures into reporting processes, with a focus on control immutability and automation where feasible.

• Contribute to the continuous improvement of governance and reporting frameworks, ensuring alignment with QBE's cyber strategy, regulatory obligations, and business needs.

• Participate in targeted, risk-informed assurance activities that validate control effectiveness in high-priority areas, complementing formal audits and RCSA processes.

• Act as a feedback channel to Strategy & Architecture and other stakeholders, highlighting implementation challenges or systemic issues surfaced through metrics or reporting.

• Engage stakeholders to support a culture of risk transparency and accountability, encouraging proactive issue identification and evidence-based dialogue.

• Support audit and regulatory engagement by ensuring reporting artefacts and supporting evidence are accurate, consistent, and audit-ready.

Compensation Package: The salary range for this role is provided above. This is the national range for location(s) listed. The salary offer will be decided based on the role's complexity, its location, and the candidate's professional background, including their education and experience. Beyond the base salary, regular full-time and part-time employees will also be eligible for QBE's annual discretionary bonus plan based on business and individual performance.We encourage all candidates to apply, even if their salary expectations fall outside of this range, as we are committed to finding the right fit for our team.

QBE Benefits: We offer a range of benefits to help provide holistic support for your work life, whatever your circumstances. As a QBE employee you will have access to:

• Hybrid Working - a mix of working from home and in the office

• 22 weeks of paid leave for family growth, with 12 weeks available to all parents on a gender-equal basis

• Competitive 401(k) program with company match up to 8%

• Well-being program including holistic wellbeing coaching, gym membership, confidential counselling, financial and legal advice

• Tuition Reimbursement for professional certifications, and continuing education

• Employee Network and Community - QBE actively supports six Employee Networks, and many ways to give back to your community

To learn more, click here: Benefits | QBE US.

Why QBE? What if you could have a positive impact - at work and in the world?

At QBE, we're enabling a more resilient future - for our customers, communities, environment, and for our people. We're building momentum to achieve something significant and know our people are at the center of our success.

Our industry offers interesting and varied careers where you can help people to protect what matters most. As part of the QBE team, you'll get to spend every day working with people who are passionate, talented and kind. And our international scale means we're big enough for your ambitions, yet small enough for you to make a real impact.

Join us now, so you can be part of our success - and we can be part of yours!

https://www.linkedin.com/company/qbe-north-america/

Commitment to Diversity

QBE is committed to providing reasonable accommodation to, among others, individuals with disabilities and disabled veterans. If you need an accommodation because of a disability to search and apply for a career opportunity with QBE, please inform our Talent Acquisition team to let us know the nature of your accommodation request and your contact information.

Equal Employment Opportunity:

QBE provides equal employment opportunities to applicants and employees without regard to race; color; gender; gender identity; sexual orientation; religious practices and observances; national origin; pregnancy, childbirth, or related medical conditions; protected veteran status; or disability or any other legally protected status.

Supplementary information

Skills:

How to Apply:

To submit your application, click "Apply" and follow the step by step process.

Equal Employment Opportunity:

QBE is an equal opportunity employer and is required to comply with equal employment opportunity legislation in each jurisdiction it operates.