Sr. Compliance Management Specialist

Job Title

Position Overview

Under limited supervision, deliver RGA’s global IT risk management services. Ensure risk services requests are processed and completed within a defined response timeframe. Improve IT risk assessment processes to meet business agility and compliance obligations. Provide security risk guidance to assist stakeholders or requestors to make risk decisions. Participate in the development of policies, procedures, standards, and controls.

Responsibilities

• Implement Risk Assessment services, which includes processing and completing risk assessment requests from various departments and offices in RGA
• Designs, implements, and maintains IT Governance’s Risk Management Framework
• Help facilitate risk assessment workshops that include threat analysis, control effectiveness evaluation, and risk remediation recommendations
• Work with various RGA departments to assess project and data risks associated to security and compliance requirements, and provide guidance and advise for stakeholders to make decisions
• Maintain proper linkage from IT risk and controls register to Corporate and IT level policies.
• Assist with RGA Compliance Inquiry requests process, which includes responding to clients’ security and risk assessment questionnaires
• Perform other duties as assigned

Requirements

Education

• Required: Bachelor’s degree or equivalent experience
• Preferred: Master’s degree and/or LOMA certification

Required Experience

• 4+ years IT security, privacy, audit, controls and regulatory compliance, or related experience
• Intermediate ability to evaluate IT controls objectives and feasibility
• Intermediate oral and written communication skills, demonstrating the ability to convey complex technical and security concepts and terminology to that which is meaningful and well received by the customer
• Intermediate knowledge of broad security and risk management related practices
• Ability to manage multiple projects and/or sub-teams simultaneously, including the ability to delegate key areas of responsibility
• Ability to adapt to new methods, work under tight deadlines and stressful conditions
• Ability to work well within a team
• Intermediate investigative, analytical, and problem-solving skills
• Ability to liaise with individuals across a wide variety of operational, functional, and technical disciplines
• Ability to translate business needs and problems into viable/accepted solutions
• Intermediate skills in customer relationship management
• Ability to resolve conflict and foster teamwork
• Experience leading security risk assessments, regulatory compliance audits/inquiries, and control assessments
• Knowledge of risk and control frameworks (e.g., NIST CSF, NIST 800-53, ISO/IEC 27001)

Technical Requirements

• Basic understanding of IT domains: infrastructure, networking, storage, databases, operating systems, cloud, applications, etc.
• Strong understanding of security technologies, including: SSO, IAM, DLP, EDR, SIEM, firewalls, gateways, IDS/IPS, CASB, antivirus, SSDLC, cryptography, PKI, etc.

Preferred Experience

• Insurance/Reinsurance industry knowledge/experience
• Experience with risk quantification (FAIR or Hubbard Decision Research)
• Information security, compliance, risk, or audit professional certifications, such as: CISSP, CISA, CRISC, CISM, CGEIT, CPA, CIA
• Experience reviewing SSAE 16/ SSAE 18 attestations
• Project management skills/experience
• Strong understanding of domestic and global security & privacy regulations

Preferred Technical Experience

• Cloud assessment experience (AWS, Azure, Google Cloud, etc.)
• Previous experience as a Systems Administrator, IT Auditor, Developer, Penetration Tester, Cloud Security Engineer, GRC Analyst, Risk Analyst, Information Security Analyst/Engineer/Consultant

Company Overview

Reinsurance Group of America, Incorporated (NYSE: RGA) is one of the largest global providers of life reinsurance, with offices around the world. RGA delivers expert solutions in individual life reinsurance, individual living benefits reinsurance, group reinsurance, financial solutions, facultative underwriting and product development. Our mission is to enhance our clients’ prosperity by supporting their financial and risk management capabilities.