Hybrid Cyber Security Review Program Lead

Pacific Life; Omaha (NE); Hybrid; USD 118,000 - 145,000; Full time

Benefits offered by this job

Health, Dental, Vision

Wellbeing Reimbursement Account

Paid Time Off

Parental Leave

401k with company match

Job summary

Pacific Life seeks a Senior Security Engineer to join the OR&R team, owning the design, governance, and delivery of the Cyber Security Review program. You will partner with Procurement, IT, Risk, and other functions to embed risk considerations in project decisions, and shape the program's strategy with the Engineering Service Lead.

The role is hybrid, located in Newport Beach, CA or Omaha, NE, with four days onsite and one day remote.

Qualifications

• 6+ years of experience in security engineering, risk management, or a related technical discipline within a large enterprise environment.
• Demonstrated experience owning or leading a security review, risk assessment, or related program, including responsibility for methodology design, process governance, and delivery outcomes
• Deep technical experience across a broad range of technologies to support thorough and effective security assessments
• Experience conducting security reviews of technology projects, system changes, or application portfolios, with the ability to identify control gaps, design weaknesses, and areas of elevated risk
• Strong process design and improvement experience, with the ability to build structured, repeatable, and scalable review processes from the ground up or mature existing ones
• Experience engaging independently with technical and non‑technical stakeholders, balancing constructive partnership with objective, independent challenge

Responsibilities

• Own the end-to-end design, governance, and continuous improvement of the Cyber Security Review program, including methodology, standards, intake processes, and review frameworks that ensure consistent and scalable execution
• Lead reviews of new technology projects, purchases, and organizational changes, ensuring cyber and IT risk considerations are identified and addressed before implementation
• Conduct re-reviews of existing critical applications, identifying control gaps, emerging risks, and areas requiring remediation or formal risk acceptance
• Manage the relationship, execution, and oversight of our external managed service provider supporting the security review process
• Define and maintain meaningful program metrics, reporting, and stakeholder communications that create transparency into review activity, risk findings, and program performance
• Identify and execute on opportunities to improve program effectiveness through process innovation, tooling, automation, or the application of emerging technologies such as AI

Skills

Security engineering

Risk management

Security reviews

Broad tech exposure

Stakeholder mgmt

Independent work

Tools

NIST CSF

Job description

Pacific Life seeks a Senior Security Engineer to join the OR&R team, owning the design, governance, and delivery of the Cyber Security Review program. You will partner with Procurement, IT, Risk, and other functions to embed risk considerations in project decisions, and shape the program's strategy with the Engineering Service Lead.

The role is hybrid, located in Newport Beach, CA or Omaha, NE, with four days onsite and one day remote.