Lead Information Security Engineer

You desire impactful work.
 

You’re RGA ready

RGA is a purpose-driven organization working to solve today’s challenges through innovation and collaboration. A Fortune 200 Company and listed among its World’s Most Admired Companies, we’re the only global reinsurance company to focus primarily on life- and health-related solutions. Join our multinational team of intelligent, motivated, and collaborative people, and help us make financial protection accessible to all.

Leads the design and delivery of security data engineering and intelligence capabilities that integrate, correlate, enrich, and operationalize data across security, governance, cloud, application, endpoint, vulnerability, and risk platforms. Builds governed, reusable data products and analytics that improve risk prioritization, remediation effectiveness, control visibility, and measurement of security outcomes. Serves as a hands-on technical lead, leads small and complex cross-functional initiatives, mentors technical staff, and partners with leaders, control owners, remediation teams, Enterprise Data Platform teams, and other stakeholders. Helps define, build, validate, and socialize trusted KPIs, KRIs, control-effectiveness measures, and outcome-based metrics that support clear accountability and measurable risk reduction.

Principle Duties

• Leads the design and delivery of complex security data engineering initiatives and small cross-functional project teams, providing technical direction from solution design through implementation and operational ownership.

• Ingests and integrates data from security, governance, cloud, application, endpoint, vulnerability, identity, and risk platforms using scalable data pipelines, applications, APIs, and automation.

• Deduplicates, correlates, and enriches security findings with asset, ownership, business, control, and risk context to produce actionable intelligence.

• Designs and delivers governed security data products through RGA’s Enterprise Data Platform, using Snowflake and enterprise data-engineering patterns to make security information reusable, trusted, and accessible.

• Develops and optimizes Snowflake data models, SQL transformations, queries, and compute patterns while managing data quality, performance, access, traceability, and cost.

• Partners with Enterprise Data Platform, Data Governance, and security teams to establish sustainable ingestion, transformation, role-based access, lineage, metadata, data-quality, and lifecycle practices.

• Co-develops KPIs, KRIs, control-effectiveness measures, thresholds, targets, and supporting calculation methodologies aligned with security strategy, risk objectives, and technical standards.

• Establishes metric governance through documented definitions, authoritative data sources, ownership, data-quality checks, refresh cadence, version control, and traceability to underlying risks, controls, and remediation workflows.

• Socializes metrics with leaders, control owners, and remediation teams by translating technical results into clear risk narratives, validating definitions and assumptions, and connecting executive indicators to accountable teams and actions.

• Develops tool-agnostic dashboards, scorecards, reporting capabilities, and reusable services with drill-through from leadership indicators to supporting assets, controls, findings, and remediation work.

• Identifies trends, systemic risks, concentrations of exposure, control gaps, and remediation opportunities, and provides clear recommendations to technical teams and leadership.

• Builds strong data foundations for security automation and future AI-enabled and Model Context Protocol-based capabilities.

• Technically mentors associates, establishes engineering standards, guides design and peer reviews, and provides training and knowledge sharing as required.

• Evaluates new security, data, and analytics technologies and recommends solutions that maximize business value while reducing manual effort and unnecessary vendor dependency.

• Communicates architecture, tradeoffs, delivery status, risks, and recommendations clearly to technical teams, leaders, and business stakeholders.

Success Measures

• Security data from multiple platforms is consistently integrated, normalized, enriched, governed, and available for decision-making.

• Leaders, control owners, and remediation teams share trusted definitions for KPIs, KRIs, controls, thresholds, targets, and ownership, with clear links to prioritized actions.

• Executive indicators provide concise risk and performance narratives with drill-through to the teams, assets, controls, and remediation work driving the result.

• Security data is delivered through reusable Enterprise Data Platform and Snowflake data products rather than isolated pipelines, manual extracts, or tool-specific reporting.

• Manual integration and reporting effort is reduced through scalable automation, reusable engineering patterns, and documented ownership.

• RGA can better quantify material exposure, control coverage, remediation effectiveness, security debt, and the business value of security initiatives.

• Small team projects are delivered with strong technical direction, stakeholder alignment, sustainable ownership, and measurable outcomes.

Education

Required

• Bachelor’s degree in Arts/Sciences (BA/BS) or equivalent experience

Preferred

• Master’s degree in Arts/Sciences (MA/MS) or relevant professional industry certification 
• CISSP, CISA, CCSP, CGRC, Comptia CASP+, OSCP, CEH Certifications

Work Experience

Required

• 6+ years of experience in security engineering, information systems, data engineering, security analytics, application development, or a closely related discipline, including significant hands-on security technical delivery. 
• Demonstrated experience leading technical projects or small project teams, guiding solution design, mentoring others, and driving work through delivery. 

Preferred

• Experience managing and developing security data products, analytics, reporting, or metrics within a governed enterprise data environment.

Preferred Technical Experience

• Experience with Snowflake, dbt, Airflow, Atlan, Power BI, Git-based development workflows, infrastructure as code, CI/CD, containers, or serverless application patterns. 

• Experience with security platforms such as Wiz, GitHub Advanced Security, GitGuardian, CrowdStrike, Tenable, Nucleus, LogicGate, or comparable technologies. 

• Knowledge of exposure management, vulnerability prioritization, risk-based remediation, security program measurement, and control-effectiveness reporting. 

• Experience with AI-enabled integrations, automation, or Model Context Protocol. 

• Relevant cloud, security, data engineering, analytics, or architecture certifications.

Skills and Abilities

Required

• Strong information security knowledge and the ability to work with vulnerability, exposure, cloud, application, endpoint, identity, governance, and control data.

• Experience defining and operationalizing KPIs, KRIs, control measures, and outcome-based metrics, including calculation logic, thresholds, targets, ownership, and validation.

• Working knowledge of governed data-product practices, including role-based access, lineage, metadata, data quality, ownership, and secure data sharing.

• Experience with security analytics, business intelligence, dashboard development, data visualization, and executive or operational reporting.

• Advanced hands-on skill with Python, SQL, APIs, data modeling, databases, and automated data pipelines.

• Experience building analytical models, pipelines, or data products on Snowflake, an enterprise data platform, or a comparable cloud data ecosystem.

• Experience designing, developing, deploying, and operating applications or data services in AWS or another major cloud platform.

• Advanced oral and written communication skills, including the ability to explain complex technical and risk concepts to leaders, control owners, engineers, and remediation teams.

• Advanced ability to translate business and security needs into maintainable technical solutions, measurable outcomes, and actionable recommendations.

• Advanced investigative, analytical, problem-solving, stakeholder-management, change-management, negotiation, and influence skills.

• Ability to balance strategic architecture with hands-on engineering, manage competing priorities, and operate effectively with limited direction.

• Ability to work effectively across technical, operational, risk, governance, and business functions.

#LI-CW1

#LI-Remote

What you can expect from RGA:

• Gain valuable knowledge from and experience with diverse, caring colleagues around the world.

• Enjoy a respectful, welcoming environment that fosters individuality and encourages pioneering thought.

• Join the bright and creative minds of RGA, and experience vast, endless career potential.

We’re excited to get to know you and connect your unique skills with our global opportunities. To create a modern and seamless experience, we use artificial intelligence (AI) in parts of our preliminary screening process. This technology helps us personalize job recommendations, automate interview scheduling, evaluate candidates based solely on experience—without considering name, gender, or other personal details—and provide real-time answers through our chatbot. AI is used only during early screening and never makes hiring decisions. Your RGA recruiter will work closely with you every step of the way to ensure the process feels personal, thoughtful, and focused on you.

Compensation Range:

Base pay varies depending on job-related knowledge, skills, experience and market location. In addition, RGA provides an annual bonus plan that includes all roles and some positions are eligible for participation in our long-term equity incentive plan. RGA also maintains a full range of health, retirement, and other employee benefits.

RGA is an equal opportunity employer. Qualified applicants will be considered without regard to race, color, age, gender identity or expression, sex, disability, veteran status, religion, national origin, or any other characteristic protected by applicable equal employment opportunity laws.