Assistant Vice President, Technology GRAC

Who are we?

A strategic and trusted insurance partner, Berkshire Hathaway Specialty Insurance (BHSI), provides a broad range of commercial property, casualty and specialty insurance coverages and outstanding service to customers and brokers around the world. Part of Berkshire Hathaway’s insurance operations, we bring our solutions to market with our stellar brand name, top-rated balance sheet, and the expertise of our global team of professionals, who exude excellent capabilities and strong character.

We are a values-based organization where respect, integrity, excellence, collaboration, and passion define who we are and how we do business. We value diversity of backgrounds, experience, and perspectives and strive to foster an inclusive environment that enables all our team members to bring their best selves to work. We are one team committed to building a culture where every teammate has the opportunity to contribute and be recognized.

Want to be part of the team building the finest property, casualty and specialty lines insurance company in the world?

Berkshire Hathaway Specialty Insurance (BHSI) has an exciting opportunity for a new team member to join their Technology Audit/Compliance team as an Assistant Vice President of Technology Governance, Risk, Audit, and Compliance within our Boston, MA office. The Assistant Vice President will take an active, leadership role in the execution of our Technology audit, compliance, and risk frameworks, while collaborating closely with both internal and external partners.

In this newly created role, there is significant opportunity for career growth while assisting in the expansion of our evolving global audit/compliance/risk landscape. This is an opportunity to provide significant impact working with external global regulators and internal regional legal and compliance teams from an enterprise-wide position.

• Facilitate regularly scheduled Technology with responsible parties regarding outstanding requests and/or questions.
• Maintain, organize, and store audit evidence in preparation for upcoming scheduled audits.
• Request, collect, review, and assess compliance reports from external organizations (i.e. SOC 2 type 2 reports).
• Conduct internal Technology audits (i.e. health checks) and assess the effectiveness of current controls and processes in place.
• Assist in developing, implementing, and executing additional internal Technology audit/compliance/risk activities.
• Coordinate with team members regarding the remediation status of closing out identified audit gaps.
• Provide support to our offices from both a U.S. and global perspective (i.e. Asia, Europe, etc.) regarding the fulfillment of external audit requests and obligations.
• Analyze global Technology regulatory authorities (i.e. GDPR, APRA, MAS, etc.) and coordinate with individuals to ensure controls are in place to meet requirements.
• Attend/participate in e-learning training sessions to increase background knowledge of the ever-evolving Technology regulatory landscape.

• 15+ years of experience managing and working in an Technology audit/compliance/risk function with a general understanding (at minimum) in several of the Technology audit/compliance/risk topics listed below:
  • Active Directory, password standards, user access provisioning/deprovisioning, user access reviews, change management, batch jobs/backups, disaster recovery, service accounts, patch management, risk assessment.
• Solid background knowledge of US domestic Technology regulations (i.e., SOX, CCPA, PCI, NY-DFS etc.) is recommended.
• Background knowledge of global Technology regulations (i.e., GDPR, MAS, APRA, BAFIN etc.) is preferred, but not required.
• Ability to work in a team-based environment and communicate effectively and efficiently with others domestically and globally.
• Previous experience working with auditing tools and software (i.e. Workiva, Audit Board, Vanta, Drata, Protect etc.) is a plus.

• A competitive package and exciting growth opportunities for career-oriented teammates.
• A dynamic, action oriented, and thoughtful environment centered on always doing…