Cybersecurity Program Manager

About Reserv

Reserv is an insurtech creating and incubating cutting-edge AI and automation technology to bring efficiency and simplicity to claims. Founded by insurtech veterans with deep experience in SaaS and digital claims, Reserv is venture-backed by Bain Capital and Altai Ventures and began operations in May 2022. We are focused on automating highly manual tasks to tackle long-standing problems in claims and set a new standard for TPAs, insurance technology providers, and adjusters alike. We have ambitious (but attainable!) goals and need people who can work in an evolving environment. If building a leading TPA and the prospect of tackling the long-standing challenges of the claims role sounds exciting, we can't wait to meet you.

Reserv is building the industry-leading third-party administrator capability in the insurance industry. To do this, Reserv seeks a candidate to join the Security team as a Cybersecurity Program Manager. The Cybersecurity Program Manager will be responsible for managing complex efforts, participating in broader planning efforts, and, in some cases, leading strategic elements of programs. 

The Cybersecurity Program Manager is a hands-on technical role focused on overseeing and operationalizing efforts that drive daily success. Daily efforts will vary between vendor management, compliance audit management, and complicated IT transactions, but the mission remains the same: ensuring a secure and efficient Security and IT environment for Reserv. Successful candidates will bring experience managing complexity, building programs, and understanding software development, all while working in a heavily regulated environment. This position requires novel problem-solving, continuous learning, and the ability to adapt quickly to new technologies.

What to expect

• Assess, build, and manage complex initiatives with the VP of Security
• Manage multiple projects simultaneously, ensuring successful completion and executive-level communications
• Develop, manage, and oversee the most critical and complex vendor relationships to empower IT and Security, including the third-party vendor risk management program
• Manage and assist the DPO with privacy initiatives spanning multiple regulatory environments
• Manage, lead, and deliver confidence across multiple regulatory and industry audit programs (both for customer and external assurance)
• Identify gaps and suggest solutions to efficiently improve security throughout development processes 
• Serve as a “voice of security” to the organization, ensuring the security mission is well-understood and appreciated
• Deliver customer confidence and trust initiatives, including operationalizing efficiency in the customer due diligence process
• Improve, prepare, and empower Security and Technology executives to lead critical committees
• Manage and lead all aspects of policy and standards development across the Security and IT organization
• Distill and develop executive reporting programs to fulfill OKRs, working with Director and VP-level leadership to understand goals that will translate to metrics and measures

Does this sound like you?

• Minimum of 7 years of experience directly working in a cybersecurity role
• Strong written and verbal communication skills
• Working understanding of NIST Cybersecurity Framework
• Technical proficiency with MacOS, Windows, Unix/Linux
• Demonstrated proficiency across multiple audit and regulatory frameworks
• Knowledge of current threat actors, TTPs, and MITRE ATT&CK framework
• Experience with cloud-based productivity platforms such as Google Workspace and/or Microsoft 365
• Experience performing risk assessments, drafting/maintaining cybersecurity policies and procedures, and constructing after-action reports with precise details
• Experience selecting vendors and managing relationships

Icing on the cake

• Bachelors degree in Cybersecurity, IT, or related field
• Deep understanding of regulated environments
• Technical proficiency with common cybersecurity tools such as those found in SIEM/SOAR, EDR, or other toolkits 
• Security certifications such as those from ISC2 (i.e. CISSP)

Benefits

• Generous health-insurance package with nationwide coverage, vision, & dental 
• 401(k) retirement plan with employer matching 
• Competitive PTO policy – we want our employees fresh, healthy, happy, and energized!
• Generous family leave policy 
• Work from anywhere to facilitate your work life balance 

At Reserv, we value diversity in backgrounds, perspectives, and life experiences and believe that diversity in viewpoints and critical thinking drives innovation, first-principles thinking, and success. We welcome applicants from all backgrounds and encourage those from all walks of life to apply. If you believe you are a good fit for this role, we would love to hear from you!