Enterprise Security Risk Manager

Reinsurance Group Of America, Incorporated; United States; Remote; USD 78,000 - 111,000; Full time

Job summary

Reinsurance Group Of America, Incorporated is seeking a Security Risk Management Specialist to identify, assess, report, and monitor security risks across enterprise security and business functions. The role collaborates with various departments to ensure compliance with security policies and standards, while recommending measures to protect assets.

Responsibilities include risk assessments, vendor risk assessments, and serving as a project security advisor within the secure SDLC.

Qualifications

• 2+ years IT security, privacy, audit, controls and regulatory compliance, or related experience.
• Experience conducting risk assessments aligned with industry standard frameworks & standards.
• Intermediate understanding of IT domains: infrastructure, networking, storage, databases, operating systems, cloud, applications, etc.
• Strong understanding of security technologies and domains, including: SSO, IAM, DLP, EDR, SIEM, firewalls, gateways, IDS/IPS, CASB, antivirus, SSDLC, cryptography, PKI, etc.
• Knowledge of risk and control frameworks/standards (e.g., NIST CSF, NIST 800-53, ISO/IEC 27001, NIST 800-30, ISO/IEC 27005, etc).
• Oral and written communication skills, demonstrating the ability to convey complex technical and security concepts and terminology to non-technical stakeholders.
• Ability to manage multiple projects/tasks simultaneously, including the ability to delegate key areas of responsibility.
• Ability to successfully liaise with individuals across a wide variety of operational, functional, and technical disciplines.
• Excellent analytical, problem-solving, and critical-thinking skills.

Responsibilities

• Conduct comprehensive security risk assessments of enterprise systems and processes, and provide mitigation recommendations.
• Review, analyze, and provide recommendations for policy, standard, and baseline configuration exceptions.
• Perform vendor risk assessments including inherent & residual risk, analysis, and remediation tracking.
• Provide recommendations for vendor contractual requirements from risk assessment outcomes.
• Serve as a project security advisor including risk analysis gate checks in the secure SDLC process.
• Conduct threat modeling exercises to identify vulnerabilities and risks.
• Stay current on security trends, threats, and best practices to improve security posture.
• Perform other duties as assigned.

Skills

IT security

Risk assessments

NIST CSF

Communication

Cloud security

Audit/compliance

Project management

ISO 27001

Vendor risk

CISSP/CISA/CISM

Education

Bachelor’s degree or equivalent

Master’s degree or LOMA certification

Tools

AWS

Azure

Google Cloud

Python

PowerShell

REST API

Job description

Reinsurance Group Of America, Incorporated is seeking a Security Risk Management Specialist to identify, assess, report, and monitor security risks across enterprise security and business functions. The role collaborates with various departments to ensure compliance with security policies and standards, while recommending measures to protect assets.

Responsibilities include risk assessments, vendor risk assessments, and serving as a project security advisor within the secure SDLC.