Senior Software Engineer

Berkshire Hathaway Specialty Insurance (BHSI) is a strategic and trusted insurance partner, providing commercial property, casualty, and specialty insurance coverages globally. As part of Berkshire Hathaway’s insurance operations, we combine a top-rated balance sheet with a values-based culture defined by respect, integrity, excellence, collaboration, and passion. We foster an inclusive environment where diverse backgrounds and perspectives thrive, enabling every team member to contribute and be recognized.

About the role

BHSI seeks a Technology Senior Risk Analyst to join the Boston-based Technology Governance Risk Audit & Compliance (GRAC) team. In this newly created role, you will mature the Technology Risk Management pillar by proactively identifying, assessing, communicating, and monitoring technology risks across the enterprise. You will partner with Technology leadership and collaborate with teams globally to evaluate BHSI’s technology risk posture, provide independent challenge, and recommend practical risk-reducing actions aligned with our established risk appetite.

Responsibilities

• Lead risk identification, risk assessment, and ongoing monitoring; maintain the Technology risk register and ensure risks map to business objectives and risk appetite/tolerances.
• Drive Risk and Control Self-Assessments (RCSAs) with risk and control owners; advise on control design for identity & access, change/release, resiliency/DR, cloud security, data protection, and vulnerability management.
• Define and socialize KRIs/KPIs, risk dashboards, trends, and heat maps; deliver clear status to Technology leadership and key stakeholders.
• Partner with the Vendor Risk Management Team to evaluate critical vendors (including AI-enabled services), review SOC reports/certifications, assess control gaps, and track remediation/compensating controls through closure.
• Track risk issues, action plans, and target dates; validate remediation and retest where needed; participate in lessons-learned and scenario exercises.
• Support U.S. and global offices (Asia, Middle East, UK, Europe, Australasia) in fulfilling technology risk-related requests and obligations.
• Assess AI/automation use cases for explainability, privacy, security, and bias risk; ensure appropriate documentation, monitoring, and governance are in place.
• Educate teams on risk expectations, evidence quality, and the rationale behind controls; help embed risk thinking into delivery and operations.
• Participate in e-learning training sessions to stay current with the evolving technology regulatory landscape.

Requirements

• 10+ years of experience in Technology risk, Technology audit/compliance, or cyber GRC.
• Experience running RCSAs, defining KRIs/KPIs, and presenting risk insights to senior stakeholders.
• Strong documentation skills, including writing risk narratives, control designs, control matrices, testing procedures, and remediation plans.
• Effective communication and partnership skills; ability to challenge constructively and receive challenge professionally.
• Experience conducting vendor risk reviews, including SOC 2 analysis, control gap identification, and remediation follow-up.
• Solid knowledge of major risk and control frameworks (e.g., NIST CSF, COSO ERM, COBIT).
• Working knowledge of U.S. technology regulations (e.g., SOX, CCPA/CPRA, PCI, NY-DFS) is recommended.
• Familiarity with global regulatory frameworks (e.g., GDPR, CBI, DORA, MAS, APRA, BaFin) is preferred but not required.
• Ability to work in a team-based environment and communicate effectively with domestic and global colleagues.
• Experience with GRC tools such as Workiva, AuditBoard, ServiceNow, Drata, Vanta, or similar platforms is a plus.
• AI experience, including understanding of AI risks, responsible AI concepts, or emerging AI regulatory requirements, is a plus.
• Professional certifications such as CRISC, CISA, CISM, CISSP, or ISO/IEC 27001 Lead Implementer/Lead Auditor (or equivalent) are a plus.

Benefits

• Comprehensive health, dental, and vision benefits.
• Disability insurance (short-term and long-term).
• Life insurance and accidental death & dismemberment insurance for you and your family.
• Flexible spending accounts and health reimbursement account.
• Employee assistance program.
• Retirement savings 401(k) plan with company match.
• Generous holiday and paid time off.
• Tuition reimbursement.
• Paid parental leave.

Pay

The base salary range for this position in Boston is $160,000 to $180,000, along with annual bonus eligibility. Total compensation is determined by relevant skills, location, and experience.