Associate Cybersecurity Due Diligence Specialist

rgare; United States; On-site; USD 57,000 - 82,000; Full time

Job summary

RGA is a Fortune 200 company focused on life- and health-related solutions. Under direct supervision, the role monitors and improves security, resilience and integrity of global systems to safeguard data and assure regulatory compliance.

The position involves collaborating with compliance, security and technology teams on audits, training, and policy development, with responsibilities across multiple units to meet due dates and ensure timely remediation.

Qualifications

• 2+ years in IT security, audit, controls or regulatory compliance.
• Insurance/Reinsurance industry experience preferred.
• Familiar with data protection laws and audits.

Responsibilities

• Collaborate on projects relating to global data protection compliance.
• Develop and administer security training and awareness campaigns.
• Assist in managing audits and remediation activities to meet deadlines.
• Support policy development, controls, and security assessments.
• Contribute to continuous improvements across security programs.

Skills

IT security

Audit & controls

Regulatory compliance

SOC1 SOC2 attestations

Project management

Confidentiality

Education

HS Diploma or GED

BA/BS or equivalent experience

Tools

Excel

Word

Visio

Teams

SharePoint

Job description

You desire impactful work.

You're RGA ready

RGA is a purpose-driven organization working to solve today's challenges through innovation and collaboration. A Fortune 200 Company and listed among its World's Most Admired Companies , we're the only global reinsurance company to focus primarily on life- and health-related solutions. Join our multinational team of intelligent, motivated, and collaborative people, and help us make financial protection accessible to all.

Under direct supervision, monitors, evaluates, and makes recommendations regarding the security, resilience and integrity of global systems to provide assurances that systems and data are properly safeguarded. '

Principle Duties

• Collaborate with compliance, security and technology professionals on projects related to compliance with global data protection laws.
• Assist in developing and administering security training and awareness campaigns for various groups within the company. Provide input to improve processes to mitigate risk, meet business obligations, and regulatory requirements.
• Assists in managing incoming audits and assessments, facilitating discussions with appropriate owners and business stakeholders, and follows up on any remediation activities identified to meet associated due dates to ensure timely completion.
• Participates in the development of policies, standards, controls, procedures, and security audits and assessments.
• The scope of routine activities and tasks in this role will be in support of one or more functional areas, the department or division.
• Performs other duties as assigned

Qualifications

Education:

• H.S. Diploma or General Education Degree (GED) industry experience or degree in progress required
• Bachelor's Degree in Arts/Sciences (BA/BS) or equivalent experience preferred

Work Experience:

• 2+ Years relevant experience in IT security, audit, controls and regulatory compliance, or related experience. required
• Insurance/Reinsurance industry experience or certifications preferred
• Microsoft Office application experience (Excel, Word, Visio, Teams, SharePoint) required
• Experience reviewing SOC1 and SOC2 attestations preferred
• Project management skills/experience preferred

Licenses & Certifications:

• Information security, compliance, risk or audit professional certifications, such as: SSCP, CISA, Certified in Cybersecurity and Security+ preferred

Skills & Abilities:

• General knowledge of business and technology operations; ability to work well within a team setting and maintain a high level of confidentiality required
• Developing knowledge of global standards and regulations regarding security, technology, and resilience. Willingness to learn and stay current on data security threats and vulnerabilities. required
• Basic organizational, planning and task management skills with high attention to detail; ability to adjust to changing priorities and work under tight timelines required
• Investigative, analytical and problem solving skills; ability to set goals, communicate expected outcomes and liaise with individuals across a variety of functions and levels required
• Excellent customer service skills; ability to balance multiple priorities, deadlines and deliverables while maintaining a positive attitude required
• Oral and written communication skills; ability to convey information in a clear and concise manner and provide regular proactive updates to team members and key stakeholders required
• Quick to adapt to new methods; ability to be flexible when needed, take initiative and demonstrate accountability required
• Familiarity with IT and security systems required
• Knowledge of applicable regulations such as Sarbanes-Oxley, GLBA, GDPR, etc. required
• Basic understanding of domestic and global security and technology regulations preferred
• IT Control Frameworks including NIST CSF/P, COBIT, ITIL, ISO 27001/27002, CIS, etc. preferred
• Knowledge of risk assessment methods preferred

What you can expect from RGA:

• Gain valuable knowledge from and experience with diverse, caring colleagues around the world.
• Enjoy a respectful, welcoming environment that fosters individuality and encourages pioneering thought.
• Join the bright and creative minds of RGA, and experience vast, endless career potential.

Compensation Range: $57,300.00 - $81,870.00 Annual