Cyber Risk Assurance Senior Advisor

The Cyber Risk Assurance (CRA) team helps The Cigna Group strengthen cybersecurity, manage risk, and improve cyber maturity. As a Cyber Risk Assurance Senior Advisor, you will lead cybersecurity assessments, partner with business and technology leaders, and turn complex findings into practical recommendations that help protect our organization and the customers we serve.

This is an opportunity to influence cybersecurity improvements across a diverse technology landscape. You will challenge assumptions, guide risk discussions, and help teams make informed decisions while continuing to grow your expertise and leadership.

• →Lead cybersecurity maturity assessments, compliance reviews, control evaluations, and other risk assurance activities across business and technology environments.
• →Define and challenge assessment scope, objectives, assumptions, testing approaches, and control applicability to deliver meaningful risk insights.
• →Lead stakeholder interviews, walkthroughs, workshops, and evidence reviews to understand control design and effectiveness.
• →Evaluate cybersecurity controls across cloud, hybrid, and on-premises environments using frameworks and requirements such as NIST Cybersecurity Framework (CSF), NIST SP 800-53, HITRUST, ISO 27001/27002, and the HIPAA Security Rule.
• →Analyze results to identify control weaknesses, root causes, systemic issues, emerging risks, and opportunities to improve cyber maturity.
• →Translate complex assessment findings into clear observations, maturity ratings, executive summaries, and practical recommendations.
• →Present risk themes, findings, and recommendations to technical teams, business partners, and senior leaders.
• →Partner with business, technology, and cybersecurity teams to support informed risk decisions and sustainable improvements.
• →Mentor team members and help strengthen assessment methods, reporting practices, and team standards.
• →Stay current on cybersecurity threats, regulatory expectations, industry frameworks, and emerging technologies.
• →Lead multiple assessments and priorities while maintaining quality and delivering results on time.

• 5+ years of experience in cybersecurity, information security, IT audit, technology risk management, compliance, consulting, or a related field.
• Experience leading cybersecurity assessments, audits, compliance reviews, maturity assessments, or assurance activities.
• Experience evaluating cybersecurity controls against one or more recognized frameworks, such as NIST CSF, NIST SP 800-53, HITRUST, ISO 27001/27002, or HIPAA.
• Experience working with cloud, hybrid, and/or on-premises technology environments.
• Strong analytical and problem-solving skills with the ability to identify risk themes and recommend practical solutions.
• Strong written, verbal, facilitation, and presentation skills, including the ability to explain complex technical concepts to technical and non-technical audiences.
• Demonstrated ability to build relationships and influence stakeholders across functions and organizational levels.
• Industry certification such as CISSP, CISA, CISM, CRISC, Security+, SSCP, GSEC, or a similar cybersecurity or risk certification.

• Experience conducting cybersecurity maturity assessments.
• Experience working in healthcare, financial services, consulting, or another regulated industry.
• Experience presenting cybersecurity findings, risk themes, and recommendations to senior leadership.
• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field, or equivalent professional experience.

Qualified applicants will be considered without regard to race, color, age, disability, sex, childbirth (including pregnancy) or related medical conditions including but not limited to lactation, sexual orientation, gender identity or expression, veteran or military status, religion, national origin, ancestry, marital or familial status, genetic information, status with regard to public assistance, citizenship status or any other characteristic protected by applicable equal employment opportunity laws.

If you need a reasonable accommodation to complete the online application process, please email seeyourself@thecignagroup.com for assistance.  Please note that this email inbox is dedicated to accommodation requests only and cannot provide application updates or accept resumes.

The Cigna Group has a tobacco-free policy and reserves the right not to hire tobacco/nicotine users in states where that is legally permissible. Candidates in such states who use tobacco/nicotine will not be considered for employment unless they enter a qualifying smoking cessation program prior to the start of their employment. These states include: Alabama, Alaska, Arizona, Arkansas, Delaware, Florida, Georgia, Hawaii, Idaho, Iowa, Kansas, Maryland, Massachusetts, Michigan, Nebraska, Ohio, Pennsylvania, Texas, Utah, Vermont, and Washington State.

Qualified applicants with criminal histories will be considered for employment in a manner consistent with all federal, state and local ordinances.