Information Security Engineer

About Us:At CIGA, our mission is to Serve Those Who Have Nowhere Else to Go. We are dedicated to helping keep the Insurance promise through being an empathetic and trusted payer of claims of insolvent insurance companies. Our team thrives in a collaborative, vibrant environment where culture and service guide everything we do. If you’re looking to make a real impact and grow alongside a dynamic organization committed to protecting Californians, CIGA is the place for you. Join us and be part of a mission that matters!Job OverviewReporting directly to the Chief Information Officer, the Information Security Engineer is responsible for developing, implementing, and maintaining the organization’s information security program to protect systems, data, and operations. This role ensures alignment with business objectives while managing cybersecurity risks, regulatory obligations, and incident response readiness.The position provides leadership across security governance, risk management, and operational security functions, working closely with IT, business units, and executive leadership.DutiesSecurity Strategy & GovernanceIn partnership with IT Leadership, develop and execute the enterprise information security strategy aligned with organizational goalsManage Security Roadmap, working with technical staff to deliver progressEstablish and maintain security policies, standards, and proceduresLead security risk management efforts, including risk assessments and mitigation planningEnsure compliance with industry best practices and regulatory/audit requirementsIncident Response & Business ContinuityLead cybersecurity incident response planning and executionCoordinate communication and escalation during security incidents, including executive updatesPartner with IT and business teams to strengthen disaster recovery and business continuity capabilitiesAlthough very rare, this position may require response off-hoursRisk & ComplianceConduct regular risk assessments and security reviews of systems and vendorsParticipate in CIGA’s Third-Party Risk Management frameworkSupport internal and external audits and lead audit response effortsMaintain comprehensive documentation and report on security postureLeadership & CollaborationPartner with IT leadership to integrate security into all technology initiativesProvide guidance to business stakeholders on security best practicesLead, mentor, and develop security team members (if applicable)Serve as a trusted advisor to executive leadership on cybersecurity risksPrepare and/or present board-level cybersecurity reportingAwareness & TrainingDevelop and deliver organization-wide security awareness programsPromote secure behaviors and practices across staffOther duties, as assigned.Key Performance Indicators (KPIs) for this position could include:Reduction in security incidents and vulnerabilitiesCompliance audit resultsIncident response effectiveness and recovery timeSecurity awareness program participation and effectivenessRequirementsEducation & ExperienceA four-year degree in Cybersecurity, Information Technology, or related field strongly preferred5+ years of experience in cybersecurity2+ years in a leadership or supervisory roleRelevant security certifications (e.g., CISSP, CISM, CISA)Technical ExpertiseStrong knowledge of security frameworks (NIST, ISO 27001, CIS) and programsExperience with cloud security, identity management, and network security toolsExperience with relevant internal and external audits, including managing remediationSolid familiarity with incident response and threat management processesSkillsStrong leadership and communication skillsAbility to translate technical risk into business impactStrong analytical and problem-solving abilitiesAbility to manage multiple projects simultaneously and deliver according to deadlines.Ability to work both independently with minimal supervision, and as a member of the team, and to be flexible and responsive to various tasks assigned.Experience working with cross-functional teams and executive stakeholdersWhat You’ll Get:· Flexible Remote and Hybrid work options· Comprehensive medical, dental, and vision insurance for you and your family· Employer-provided life and disability insurance· A Generous Paid Time Off Program· Best-In-Class 401(k) plan with Company Match· Company-paid Training and Certification programs· Mentorship and Coaching opportunities within the Guaranty Association communityBenefits:401(k)401(k) matchingDental insuranceEmployee assistance programFlexible scheduleFlexible spending accountHealth insuranceHealth savings accountLife insurancePaid time offParental leaveRetirement planTuition reimbursementVision insuranceRemote Work