Security Risk Manager: Policy & Compliance

Reinsurance Group of America, Incorporated; Illinois; On-site; USD 78,000 - 111,000; Full time

Job summary

RGA is a Fortune 200 company focused on life and health solutions, seeking a security professional to conduct risk assessments, policy reviews, and cross‑functional risk mitigation. You will analyze enterprise systems and support secure configurations across teams.

The role emphasizes threat modeling, vendor risk, and staying current with security trends. Strong IT security, privacy, and compliance experience are valued with opportunities to influence risk posture globally.

Qualifications

• 2+ years IT security, privacy, audit, controls and regulatory compliance experience.
• Experience conducting risk assessments aligned with industry standards.
• Understanding of IT domains: infrastructure, networking, storage, databases, operating systems, cloud, applications.
• Knowledge of security technologies and domains: SSO, IAM, DLP, EDR, SIEM, firewalls, gateways, IDS/IPS, CASB, antivirus, SSDLC, cryptography, PKI.
• Ability to convey complex security concepts to non-technical stakeholders.
• Ability to manage multiple projects and liaise across disciplines.
• Excellent analytical, problem-solving, and critical-thinking skills.

Responsibilities

• Conduct security risk assessments of enterprise systems and processes, with recommendations for mitigation.
• Review, analyze, and provide recommendations for policy, standard, and baseline configuration exceptions.
• Perform vendor risk assessments including inherent & residual risk, and track remediation to completion.
• Provide recommendations for vendor contractual requirements from risk outcomes.
• Serve as a project security advisor including risk analysis in the secure SDLC process.
• Conduct thorough threat modeling to identify vulnerabilities and risks.
• Stay current on security trends and best practices to improve the organization's posture.
• Perform other duties as assigned.

Skills

Risk assessment

IT security

Policy review

Vendor management

Compliance

Cloud security

Education

Bachelor’s degree or equivalent

Master’s degree desired

LOMA certification preferred

Tools

SSO

IAM

DLP

EDR

SIEM

Firewalls

IDS/IPS

CASB

Cryptography

PKI

Job description

RGA is a Fortune 200 company focused on life and health solutions, seeking a security professional to conduct risk assessments, policy reviews, and cross‑functional risk mitigation. You will analyze enterprise systems and support secure configurations across teams.

The role emphasizes threat modeling, vendor risk, and staying current with security trends. Strong IT security, privacy, and compliance experience are valued with opportunities to influence risk posture globally.