Current jobs related to Cybersecurity Policy Consultant - Boston MA - Fidelity Investments


  • Boston, Massachusetts, United States Falconwood Full time

    Falconwood is a woman-owned and veteran-owned company providing consultation and programmatic support to Department of Defense (DoD) Information Technology (IT) initiatives and programs.We provide expert advice and consultation on a diverse range of IT subjects, focusing on acquisition, cybersecurity, engineering, logistics, and process development.Job...


  • Boston, Massachusetts, United States Eliassen Group Full time

    Cybersecurity Business AnalystWe are seeking a highly skilled Cybersecurity Business Analyst to join our team at Eliassen Group. As a Cybersecurity Business Analyst, you will play a critical role in helping our clients achieve their business objectives by analyzing and improving their existing business processes.Key Responsibilities:Engage with stakeholders...


  • Boston, Massachusetts, United States ITmPowered, LLC Full time

    Job Summary: We are seeking a highly skilled IT Auditor Consultant to join our team at ITmPowered, LLC. As a key member of our Technology Risk Management organization, you will be responsible for conducting IT Controls Assessments for a set of 20 custom IT controls in our Hospital Medical Device Cybersecurity Program.About the Role: The Sr. IT Auditor...


  • Boston, United States Fidelity TalentSource LLC Full time

    Cybersecurity Consultant (Internal Audit Facilitator) Fidelity TalentSource is your destination for discovering your next temporary role at Fidelity Investments! We are currently sourcing for a Sr. Cybersecurity Consultant (Regulatory & Audit) to work in Fidelity’s Enterprise Cybersecurity division in Boston, MA! The Team The Enterprise Cybersecurity...

  • Cybersecurity Engineer

    2 months ago


    Boston, Massachusetts, United States Liberty Mutual Insurance Full time

    About the RoleWe are seeking a highly skilled Cybersecurity Engineer to join our team at Liberty Mutual Insurance. As a key member of our security team, you will be responsible for designing, implementing, and managing our organization's overall security posture.Key ResponsibilitiesSupport secure application development initiatives, requiring innovation,...


  • Boston, Massachusetts, United States ITmPowered, LLC Full time

    About the Role:The Sr. IT Auditor Consultant will serve on behalf of the Technology Risk Management organization performing IT Controls Assessments for a set of 20 custom IT controls in this Hospital Medical Device Cybersecurity Program.Plan and perform full lifecycle audits (scope, plan, fieldwork, reporting) assessing Audit IT Controls Design prior to...


  • Boston, Massachusetts, United States ITmPowered, LLC Full time

    About the Role:The Sr. IT Auditor Consultant will serve on behalf of the Technology Risk Management organization performing IT Controls Assessments for a set of 20 custom IT controls in this Hospital Medical Device Cybersecurity Program.Plan and perform full lifecycle audits (scope, plan, fieldwork, reporting) assessing Audit IT Controls Design prior to...


  • Boston, Massachusetts, United States Liberty Mutual Insurance Full time

    About the RoleWe are seeking a highly skilled Cybersecurity Engineer to join our team at Liberty Mutual Insurance. As a key member of our security team, you will be responsible for designing, implementing, and managing our organization's overall security posture.Key ResponsibilitiesSupport secure application development initiatives, requiring innovation,...


  • Boston, Massachusetts, United States Liberty Mutual Insurance Full time

    About the RoleWe are seeking a highly skilled Cybersecurity Engineer to join our team at Liberty Mutual Insurance. As a key member of our security team, you will be responsible for designing, implementing, and managing our organization's overall security posture.Key ResponsibilitiesSupport secure application development initiatives, requiring innovation,...


  • Boston, Massachusetts, United States Liberty Mutual Insurance Full time

    About the RoleWe are seeking a highly skilled Cybersecurity Engineer to join our team at Liberty Mutual Insurance. As a key member of our security team, you will be responsible for designing, implementing, and managing our organization's overall security posture.Key ResponsibilitiesSupport secure application development initiatives, requiring innovation,...


  • Boston, Massachusetts, United States Charles River Associates Full time

    About Charles River AssociatesCRA is a leading global consulting firm that provides independent economic and financial analysis behind litigation matters, guides businesses through critical strategy and operational issues to become more profitable, and advises governments on the economic impact of policies and regulations.Our two main services - economic and...


  • Boston, Massachusetts, United States Charles River Associates Full time

    About Charles River AssociatesCRA is a leading global consulting firm that provides independent economic and financial analysis behind litigation matters, guides businesses through critical strategy and operational issues to become more profitable, and advises governments on the economic impact of policies and regulations.Job OverviewCRA's Forensic Services...


  • Boston, Massachusetts, United States Akima Full time

    Cybersecurity Specialist IIThe Cybersecurity Specialist II is responsible for maintaining and improving the cybersecurity posture of systems and networks at the Portsmouth and St. Julien's Creek Annex sites. This full-time, onsite position requires a hands-on approach to security operations, including patching, scanning, reporting, and...


  • Boston, Massachusetts, United States Falconwood Full time

    Falconwood Career OpportunityWe are seeking a highly motivated and experienced Cybersecurity Analyst to join our team at Falconwood. As a Cloud Cybersecurity Analyst, you will play a critical role in ensuring the security and integrity of our cloud-based systems and applications.Key Responsibilities:Perform Risk Management Framework (RMF) Steps 2, 5, and...


  • Boston, Massachusetts, United States Falconwood Full time

    About the RoleFalconwood, a woman-owned and veteran-owned company, is seeking a highly motivated individual to join our team as a Cloud Cybersecurity Analyst. As a key member of our team, you will play a critical role in supporting Department of Defense (DoD) Information Technology (IT) initiatives and programs.Key ResponsibilitiesPerform Risk Management...


  • Boston, Massachusetts, United States Liberty Mutual Full time

    Job SummaryThe Principal Cybersecurity Engineer is a critical role within the Liberty Mutual Cyber Security Operations Center, reporting to the Director of the Cyber Security Operations Center. This experienced professional is responsible for identifying and delivering capabilities to enable the incident response lifecycle for strategic and operational...


  • Boston, Massachusetts, United States Jesica Full time

    About JesicaJesica is a pioneering recruiting agency that leverages AI to source, screen, and match candidates with ideal career opportunities. We work on behalf of our clients, who are actively seeking qualified professionals for various roles. If you're a candidate looking for new opportunities or just browsing, we encourage you to complete the application...


  • Boston, United States Liberty Mutual Insurance Full time

    Pay Philosophy The typical starting salary range for this role is determined by a number of factors including skills, experience, education, certifications and location. The full salary range for this role reflects the competitive labor market value for all employees in these positions across the national market and provides an opportunity to...


  • Boston, Massachusetts, United States Coverys Full time

    Job SummaryCoverys is seeking a highly motivated and detail-oriented Cybersecurity Analyst to join our Information Security team. As a Cybersecurity Analyst, you will play a critical role in supporting our team and organization by assisting with day-to-day duties, conducting security and privacy assessments, and analyzing security events and threats.Key...


  • Boston, Massachusetts, United States Topsort Full time

    About TopsortTopsort is a cutting-edge growth media infrastructure and tools company that's reshaping the e-commerce landscape. We believe in making advertising intuitive, intelligent, and genuinely cool, without any creepy ads or cookie obsession. Our mission is to democratize monetization access for all and ensure that advertising doesn't leave any brand...

Cybersecurity Policy Consultant

2 months ago


Boston MA, United States Fidelity Investments Full time

Principal, Cybersecurity Consultant
The Enterprise Cybersecurity (ECS) Regulatory & Audit team helps ECS and corporate partners manage firm-wide cybersecurity risk by providing key support services. As part of Cyber Regulatory & Audit, the ECS Internal Audit Engagement (IAE) team supports 25-30 internal audits annually. IAE seeks to reduce cyber risk through improved engagement and partnership with ECS Product Areas and Audit to ensure alignment, transparency, and efficiency throughout pre-audit, active audit, and post-audit efforts.
The ECS Internal Audit Engagement (IAE) team is seeking an experienced, passionate cybersecurity risk professional to support and partner with ECS Product Areas and Fidelity Corporate Audit. The role requires steadfast collaboration throughout the three phases of audit engagement: pre-audit (roadmap alignment, pre-audit control risk gap assessments, trend/theme analysis), active audit (risk quantification, drafting action plans, facilitating risk acceptances), and post-audit (action plan closure, reporting and metrics).
Demonstrated Risk Management and Mitigation experience
Strong Risk, Process, Cyber Threat Analysis, and Control Gap Assessment skill
Broad knowledge of cybersecurity threats and tactics
In-depth understanding of NIST Cybersecurity Framework standards and practices, COBIT 5
Knowledge of Operations & Technology (identity & access management; security ops assessments), Information Risk Management (vendor risk management; cloud computer security; data management), Software Development Life Cycle (SSDLC) and application security.
Understanding of FAIR (Factor Analysis of Information Risk) cyber risk framework
Familiarity with ECS Policies, Standards, and Technical Implementation Guides (TIGs)
Familiarity with Archer GRC, Jira, and ServiceNOW
Experience working within a Cyber Security organization
Analyst mindset to deep dive into audit findings to understand and communicate risks and appropriate responses
Partner w/ Audit and ECS teams to confirm reported audit issues and perform FAIR quantitative risk assessments
Manage ECS Risk Acceptances
Bachelor’s degree in technology, computer science, or engineering strongly preferred
~7+ years experience in cybersecurity risk management, technology operations, system analysis, and/or project management
~ CISSP (Information Systems Security Professional), CEH (Certified Ethical Hacker), CISA (Certified Information Systems Auditor)

We offer a wide range of benefits to meet your evolving needs and help you live your best life at work and at home. These benefits include comprehensive health care coverage and emotional well-being support, market-leading retirement, generous paid time off and parental leave, charitable giving employee match program, and educational assistance including student loan repayment, tuition reimbursement, and learning resources to develop your career. Note, the application window closes when the position is filled or unposted.
Fidelity Investments is a privately held company with a mission to strengthen the financial well-being of our clients. We help people invest and plan for their future. We assist companies and non-profit organizations in delivering benefits to their employees. And we provide institutions and independent advisors with investment and technology solutions to help invest their own clients’ money.
You can take advantage of flexible benefits that support you through every stage of your career, empowering you to thrive at work and at home. Candidates who are presented with a Fidelity offer will need to go through a background investigation, detailed in this document, and may be asked to provide additional documentation as requested. This investigation includes but is not limited to a criminal, civil litigations and regulatory review, employment, education, and credit review (role dependent). These investigations will account for 7 years or more of history, depending on the role. Amphetamines, THC (marijuana), cocaine, opiates, phencyclidine.
We believe that the most effective way to attract, develop and retain a diverse workforce is to build an enduring culture of inclusion and belonging.
Fidelity will reasonably accommodate applicants with disabilities who need adjustments to participate in the application or interview process.