Compliance Analyst, Cyber Security

Crum & Forster Company Overview

Crum & Forster (C&F), with a proud history dating to 1822, provides specialty and standard commercial lines insurance products through our admitted and surplus lines insurance companies. C&F enjoys a financial strength rating of "A+" (Superior) by AM Best and is proud of our superior customer service platform. Our claims and risk engineering services are recognized as among the best in the industry.

Our most valuable asset is our people: more than 2000 employees in locations throughout the United States. The company is increasingly winning recognition as a great place to work, earning several workplace and wellness awards, including the 2025 Great Place to Work® Award for our employee-first focus and our steadfast commitment to diversity, equity and Inclusion.

C&F is part of Fairfax Financial Holdings, a global, billion dollar organization.  For more information about Crum & Forster, please visit our website: www.cfins.com.

Job Description

The Crum & Forster Cyber & Information Security team is seeking a Third-Party Security Analyst.  Reporting to the Director of Cyber & Information Security, the analyst will perform third-party security assessments.  You will work with a team of professional Security Analysts leveraging Next-Gen security tools to perform the full lifecycle of third-party reviews from onboarding to real-time monitoring of vendors and suppliers.

What you will do for C&F:

• Conduct technical security assessments of third-party vendors, suppliers and partners by reviewing their security controls, adherence to regulations, compliance and contracts.
• Analyze third-party security assessment findings and document security risks within the management software for tracking of risk reporting.
• Coordinate with various stakeholders to verify and remediate security risk findings.
• Develop KRIs and KPIs around third-party risk assessments and the remediation of key findings.
• Develop, Update, and Publish Policies and Standard Operating Procedures for third-party risk management.
• Continuously monitor for active vulnerabilities and cyber events against our vendors and suppliers
• Participate in third-party cyber incident response by reaching out to impacted vendors and tracking remediation.  
• Be an ambassador for Cyber & Information Security within Crum & Forster.

What you will bring to C&F:

• Bachelor's degree in a technical discipline or equivalent experience.
• 5-7 years of Cybersecurity related experience preferred.
• Previous experience performing technical security audits or third-party assessments.
• Understanding of current Cyber Vulnerabilities & threats.
• Knowledge of security assessments (SOC reports, ISO/NIST, vulnerability and pen testing assessments).
• Fundamental understanding of system and network security principles and technology.
• Ability to interface with a wide audience of technical and non-technical personnel.
• Ability to prioritize and manage workloads and deadlines.
• Excellent written and verbal communication skills.
• Self-starter who is motivated and driven to learn.

Preferred experience:

• Prior experience and/or certifications in AWS, Azure, and/or GCP.
• 5-7 years of Cybersecurity related experience preferred.
• Experience in performing third-party assessments of SaaS providers and vendors operating in cloud environments.
• Experience performing risk assessments.
• Any Security focused Certifications.

What C&F will bring to you

• Competitive compensation package
• Generous 401K employer match
• Employee Stock Purchase plan with employer matching
• Generous Paid Time Off
• Excellent benefits that go beyond health, dental & vision. Our programs are focused on your whole family’s wellness, including your physical, mental and financial wellbeing
• A core C&F tenet is owning your career development, so we provide a wealth of ways for you to keep learning, including tuition reimbursement, industry-related certifications and professional training to keep you progressing on your chosen path
• A dynamic, ambitious, fun and exciting work environment
• We believe you do well by doing good and want to encourage a spirit of social and community responsibility, matching donation program, volunteer opportunities, and an employee-driven corporate giving program that lets you participate and support your community

At C&F you will BELONG

If you require special accommodations, please let us know. We value inclusivity and diversity. We are committed to equal employment opportunity and welcome everyone regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity, or Veteran status. If you require special accommodations, please let us know

 For California Residents Only:  Information collected and processed as part of your career profile and any job applications you choose to submit are subject to our privacy notices and policies, visit https://www.cfins.com/onlineprivacypolicy/ca/noticeatcollection/  for more information.

Crum & Forster is committed to ensuring a workplace free from discriminatory pay disparities and complying with applicable pay equity laws.  Salary ranges are available for all positions at this location, taking into account roles with a comparable level of responsibility and impact in the relevant labor market and these salary ranges are regularly reviewed and adjusted in accordance with prevailing market conditions. The annualized base pay for the advertised position, located in the specified area, ranges from a minimum of $121,500.00 to a maximum of $140,700.00. The actual compensation is determined by various factors, including but not limited to the market pay for the jobs at each level, the responsibilities and skills required for each job, and the employee’s contribution (performance) in that role. To be considered within market range, a salary is at or above the minimum of the range. You may also have the opportunity to participate in discretionary equity (stock) based compensation and/or performance-based variable pay programs.