Security Specialist jobs in Utica, NY

Utica First Insurance Company voted “Best Companies to Work for in NY 2023” has been serving the

insurance needs of families and businesses for over 100 years. We have a dedicated “team” of employees

and offer continuing opportunity for personal career growth.

Utica First is currently seeking a Cyber Security Specialist to be responsible for the

maintenance and development of a comprehensive information technology cyber security

program and cyber security mitigation efforts for Utica First Insurance.

Assure that information and systems created, acquired or maintained by Utica First Insurance,

and its authorized users, is used in accordance with its intended purpose; to protect Utica First

Insurance information and its infrastructure from external or internal threats; and to assure that

Utica First Insurance complies with statutory and regulatory requirements regarding information

access, security and privacy.

Major Responsibilities:

• Coordinate the development of Utica First Insurance’s information security policies,

party vendors and governance groups in the development of such policies. Ensure that

policies support compliance with external requirements. Oversee the dissemination of

policies, standards, and procedures to company personnel. Coordinate and participate in

technical work required to mitigate cyber security threats.

• Provide cyber security policies and procedures for our company

• Provide for the compliance of the NYS DFS regulations.

• Ensure that Utica First systems and its infrastructure are protected from external and

• Ensure that Utica First is in compliance with statutory and regulatory requirements

• Development and delivery of a comprehensive information technology cyber security

• Work with external security vendor and IT personnel performing cyber security related

• Provide security information and guidance in the assistance of startup and deployment of

• Lead UFI cyber security team activities.

• Coordinate system security related tasks and activities with IT staff and external vendor

• Ensure the security of applications software utilized by Utica First Insurance.

• Serve as the compliance specialist with respect to Utica First Insurance’s state and federal

state insurance regulations. Prepare and submit required reports and updates to designated

external parties. Function as the contact point for external auditors and agencies, survey

requests, etc. on security matters.

• Coordinate and conduct third party and internal penetration testing and vulnerability

• Incident Reporting and Response System to address Utica First Insurance security

parties. Be in compliance with state, federal and financial regulations. Serve as the

contact point for information security incidents.

• Provide ongoing risk assessment program targeting information security and recommend

• Policies and procedures to ensure the security of sensitive data or systems that are

be required to include internal requirements for minimum preferred terms to be included

in contracts with third-party service providers.

• Coordinate the development and delivery of an education and training program on

• Keep abreast of latest security and privacy legislation, regulations, advisories, alerts and

• Take part in Disaster Recovery Planning and Testing and Business Continuity.

Technical Knowledge:

Knowledge of information technology and security issues is required. Technical expertise with

Systems and Networking administration, Windows, firewalls, MS Server, SQL for on premises

and AWS cloud environments. Coordinate and perform mitigation work for threats identified in

external and internal security audits, scans, and monitoring.

Knowledge of telecommunications, network and Internet security access control systems and

methodology

Demonstrated ability to grasp security concepts and demonstrated knowledge of security

management practices, security architecture, security operations, and security modeling.

Knowledge of Risk Management techniques to defeat advanced attackers.

Security certifications such as CISSP, Security desired

Qualifications:

Sensitivity to accuracy, timeliness, and professionalism is imperative.

Ability to communicate clearly and present security findings with technical staff as well as non-

technical colleagues.

Strong analytical and problem-solving skills.

Education: Bachelor’s degree required. Advanced degree preferred.

Experience: 3-5 years of experience in information security desired. Experience in developing

and administering an information security program desirable. Working knowledge of and

experience in the policy and regulatory environment of information security, especially in

insurance is desirable but not necessary. Excellent project management, written and oral

communications skills desired. The ability to work collaboratively and as part of a team is

essential.

This position is hybrid. The ability to work remotely is possible for a candidate with the

right skill set.

Utica First offers:

• Competitive starting salary

• Medical (first of following month)

• Dental

• Vision

• Life and Disability Insurance

• Company paid LTD

• Flexible Spending Accounts

• Health Savings Account

• Matching 401(k) Plan

• Roth 401(k) Plan

• Bonus Program

• Employee Referral Program

• Generous Paid Vacation, Sick and Personal Time

• Generous Paid Holidays (including birthday)

• Business Casual Environment

Please forward your résumé and salary requirements via e-mail to the attention of the

Information Technology department at: hschweitzer@uticafirst.com

Utica First Insurance is an established property and casualty Insurance company located in the Oneida

County Industrial Park in Oriskany, NY. We have been in business for over 110 years. Utica First is an A

rated company (Excellent) by AMBest.