Cyber Security Review Program Lead

Pacific Life; Omaha (NE); Hybrid; USD 118,000 - 145,000; Full time

Benefits offered by this job

Health, Dental, Vision

Wellbeing Reimbursement Account

Paid Time Off

Parental Leave

401k with company match

Job summary

Pacific Life seeks a Senior Security Engineer to join the OR&R team, owning the design, governance, and delivery of the Cyber Security Review program. You will partner with Procurement, IT, Risk, and other functions to embed risk considerations in project decisions, and shape the program's strategy with the Engineering Service Lead.

The role is hybrid, located in Newport Beach, CA or Omaha, NE, with four days onsite and one day remote.

Qualifications

• 6+ years of experience in security engineering, risk management, or a related technical discipline within a large enterprise environment.
• Demonstrated experience owning or leading a security review, risk assessment, or related program, including responsibility for methodology design, process governance, and delivery outcomes
• Deep technical experience across a broad range of technologies to support thorough and effective security assessments
• Experience conducting security reviews of technology projects, system changes, or application portfolios, with the ability to identify control gaps, design weaknesses, and areas of elevated risk
• Strong process design and improvement experience, with the ability to build structured, repeatable, and scalable review processes from the ground up or mature existing ones
• Experience engaging independently with technical and non‑technical stakeholders, balancing constructive partnership with objective, independent challenge

Responsibilities

• Own the end-to-end design, governance, and continuous improvement of the Cyber Security Review program, including methodology, standards, intake processes, and review frameworks that ensure consistent and scalable execution
• Lead reviews of new technology projects, purchases, and organizational changes, ensuring cyber and IT risk considerations are identified and addressed before implementation
• Conduct re-reviews of existing critical applications, identifying control gaps, emerging risks, and areas requiring remediation or formal risk acceptance
• Manage the relationship, execution, and oversight of our external managed service provider supporting the security review process
• Define and maintain meaningful program metrics, reporting, and stakeholder communications that create transparency into review activity, risk findings, and program performance
• Identify and execute on opportunities to improve program effectiveness through process innovation, tooling, automation, or the application of emerging technologies such as AI

Skills

Security engineering

Risk management

Security reviews

Broad tech exposure

Stakeholder mgmt

Independent work

Tools

NIST CSF

Job description

Job Description

Providing for loved ones, planning rewarding retirements, saving enough for whatever lies ahead - our policyholders count on us to be there when it matters most. It's a big ask, but it's one that we have the power to deliver when we work together. We collaborate and innovate - pushing one another to transform not just Pacific Life, but the entire industry for the better. Why? Because it's the right thing to do. Pacific Life is more than a job, it's a career with purpose. It's a career where you have the support, balance, and resources to make a positive impact on the future - including your own.

We're actively seeking a talented Senior Security Engineer to join the Engineering department within our Operational Risk and Resilience (OR&R) team. In this role, you'll play a key part in identifying, assessing, and communicating cyber and IT risks to support effective enterprise risk management. Owning the design, governance, and delivery of our Security Review program, you'll serve as the subject matter expert for how the organization identifies and manages cyber and IT risk introduced through new purchases, projects, and technology changes. You'll operate independently, engaging directly with stakeholders across business functions including Procurement, IT, Risk, and others to embed risk identification early into organizational decision-making and implementation. Working closely with the Engineering Service Lead and Service Manager, you'll help shape service strategy while maintaining full accountability for the program's effectiveness, consistency, and maturity.

This role can be located in our Newport Beach, California or Omaha, Nebraska office and is classified as hybrid, working four days per week onsite and one day remote.

How you’ll help move us forward

• Own the end-to-end design, governance, and continuous improvement of the Cyber Security Review program, including methodology, standards, intake processes, and review frameworks that ensure consistent and scalable execution
• Lead reviews of new technology projects, purchases, and organizational changes, ensuring cyber and IT risk considerations are identified and addressed before implementation
• Conduct re‑reviews of existing critical applications, identifying control gaps, emerging risks, and areas requiring remediation or formal risk acceptance
• Manage the relationship, execution, and oversight of our external managed service provider supporting the security review process
• Define and maintain meaningful program metrics, reporting, and stakeholder communications that create transparency into review activity, risk findings, and program performance
• Identify and execute on opportunities to improve program effectiveness through process innovation, tooling, automation, or the application of emerging technologies such as AI
• Partner with the Engineering Service Lead and Service Manager to align program strategy with broader service objectives, contributing to roadmaps and capability development

The experience you bring

• 6+ years of experience in security engineering, risk management, or a related technical discipline within a large enterprise environment
• Demonstrated experience owning or leading a security review, risk assessment, or related program, including responsibility for methodology design, process governance, and delivery outcomes
• Deep technical experience across a broad range of technologies to support thorough and effective security assessments
• Experience conducting security reviews of technology projects, system changes, or application portfolios, with the ability to identify control gaps, design weaknesses, and areas of elevated risk
• Strong process design and improvement experience, with the ability to build structured, repeatable, and scalable review processes from the ground up or mature existing ones
• Experience engaging independently with technical and non‑technical stakeholders, balancing constructive partnership with objective, independent challenge

What makes you stand out

• Familiarity with project intake, change management, or architecture review processes, and how security risk oversight integrates into those workflows
• Risk management experience aligned with frameworks such as NIST Cybersecurity Framework, COBIT 2019, or the NIST Privacy Framework
• Experience building or maturing a security review program, including developing standards, templates, or playbooks that drive consistency at scale
• Previous experience as a senior individual contributor, acting lead, or subject matter authority, with a track record of influencing outcomes without formal people management responsibilities
• Strong interpersonal skills with the ability to establish credibility, build trust, and drive alignment across technical and business stakeholders
• Experience working in a global organization, partnering with stakeholders across multiple time zones

Desired behaviors

• Drives continuous improvement by constantly assessing and optimizing
• Solution oriented, focusing on practical and scalable outcomes
• Executes quickly while maintaining appropriate rigor and risk awareness
• Embraces change and adapts effectively in a dynamic environment

We are open to considering candidates across a range of experience levels. Final job level and compensation will be determined based on each candidate's qualifications, skills, and relevant experience.

The range for Newport Beach is 137K - 168K

The range for Omaha is $118K - $145K

#LI-TB1

Base Pay Range

The base pay range noted represents the company's good faith minimum and maximum range for this role at the time of posting. The actual compensation offered to a candidate will be dependent upon several factors, including but not limited to experience, qualifications and geographic location. Also, most employees are eligible for additional incentive pay.

$113,490.00 - $138,710.00

Your Benefits Start Day 1

Your wellbeing is important to Pacific Life, and we’re committed to providing you with flexible benefits that you can tailor to meet your needs. Whether you are focusing on your physical, financial, emotional, or social wellbeing, we’ve got you covered.

• Prioritization of your health and well‑being including Medical, Dental, Vision, and Wellbeing Reimbursement Account that can be used on yourself or your eligible dependents
• Generous paid time off options including: Paid Time Off, Holiday Schedules, and Financial Planning Time Off
• Paid Parental Leave as well as an Adoption Assistance Program
• Competitive 401k savings plan with company match and an additional contribution regardless of participation

You Can Be Who You Are

We are committed to a culture of diversity and inclusion that embraces the authenticity of all employees, partners and communities. We support all employees to thrive and achieve their fullest potential.

What's life like at Pacific Life? Visit Instagram.com/lifeatpacificlife

EEO Statement

Pacific Life Insurance Company is an Equal Opportunity /Affirmative Action Employer, M/F/D/V. If you are a qualified individual with a disability or a disabled veteran, you have the right to request an accommodation if you are unable or limited in your ability to use or access our career center as a result of your disability. To request an accommodation, contact a Human Resources Representative at Pacific Life Insurance Company.