71 applicants

This job has closed.

Company

Reinsurance Group of America, Incorporated · 7 hours ago

Senior Security Risk Management Specialist

Missouri, United States

Full-time

Remote

Mid, Senior Level

$85K/yr - $128K/yr

4+ years exp

Maximize your interview chances

Financial ServicesHealth Insurance

Actively Hiring

Insider Connection @Reinsurance Group of America, Incorporated

Discover valuable connections within the company who might provide insights and potential referrals.
Get 3x more responses when you reach out via email instead of LinkedIn.

Responsibilities

Deliver RGA’s global security risk management services.

Ensure risk management service requests are processed and completed within a defined response timeframe; improve processes to meet business agility and compliance obligations.

Provide security risk management guidance to assist stakeholders.

Participate in the development of policies, procedures, standards and controls.

Bridge collaboration with various business and technology stakeholders.

Conduct comprehensive security risk assessments of enterprise systems and processes, as well as provide recommendations for risk mitigation.

Review, analyze, and provide recommendations for policy, standard, and baseline configuration deviations.

Work with various RGA departments to assess risks associated with compliance requirements and provide guidance and advice for stakeholders to make decisions.

Perform vendor security risk assessments to include inherent & residual risk identification, analysis, and mitigation, and additionally track risk remediation to completion.

Stay current on security trends, threats, and best practices to continuously improve the organization's security posture.

Conduct thorough threat modeling exercises to identify potential security vulnerabilities and risks.

Serve as a project security advisor including risk analysis gate checks in the secure SDLC process.

Help maintain a culture of security, privacy and controls within RGA global IT.

Perform other duties as assigned.

Qualification

Find out how your skills align with this job's requirements. If anything seems off, you can easily click on the tags to select or unselect skills to reflect your actual expertise.

IT security experienceRisk assessment experienceSecurity technologies knowledgeInformation systems experienceIT Control Frameworks knowledgeCloud assessment experienceRegulatory compliance knowledgeVendor risk assessmentProject management skillsLOMA certificationInsurance industry knowledgeSoft skills

Required

Bachelor’s degree or equivalent experience

4+ years’ experience in information systems

3+ years IT security, privacy, audit, controls and regulatory compliance, or related experience

Experience conducting risk assessments aligned with industry standard frameworks & standards.

Intermediate understanding of IT domains: infrastructure, networking, storage, databases, operating systems, cloud, applications, etc.

Strong understanding of security technologies and domains, including: SSO, IAM, DLP, EDR, SIEM, firewalls, gateways, IDS/IPS, CASB, antivirus, SSDLC, cryptography, PKI, etc.

Ability to evaluate IT controls objectives and feasibility.

Advanced oral and written communication skills, demonstrating the ability to convey business terminology that is meaningful and well received by the customer.

Demonstrated knowledge of broad security and risk management related practices

Ability to manage multiple projects simultaneously, including the ability to delegate areas of responsibility

Ability to adapt to new methods, work under tight deadlines and stressful conditions

Ability to work well within a team.

Advanced ability to liaise with individuals across a wide variety of operational, functional and technical disciplines

Advanced ability to translate business needs and problems into viable/accepted solutions

Ability to resolve conflict and foster teamwork

IT Control Frameworks including NIST CSF, NIST 800-53, ISO/IEC 27001, NIST 800-30, ISO/IEC 27005

Knowledge of regulations including Sarbanes-Oxley, HIPAA, GLBA, GDPR

Cloud assessment experience (AWS, Azure, Google Cloud, etc.)

Preferred

Master’s degree and/or LOMA certification

Insurance industry knowledge

Information security, compliance, risk or audit professional certifications, such as CISSP, CISA, CISM, CGEIT, CRISC, CPA, OSCP, CCSP, CCSK

Knowledge of compliance certifications such as SOC2, PCI, etc.

Cyber Risk Quantification (CRQ) experience (e.g., FAIR)

Benefits

Annual bonus plan

Long-term equity incentive plan

Full range of health, retirement, and other employee benefits

Company

Reinsurance Group of America, Incorporated

Glassdoor

4.1

Reinsurance Group of America, Incorporated (NYSE: RGA) is a global industry leader specializing in life and health reinsurance and financial solutions that help clients effectively manage risk and optimize capital.

Founded in 1973

Chesterfield, Missouri, USA

1,001-5,000 employees