Senior Security & Risk Management Specialist

RGA is a purpose-driven organization working to solve today’s challenges through innovation and collaboration. A Fortune 200 Company and listed among its World's Most Admired Companies, we’re the only global reinsurance company to focus primarily on life- and health-related solutions. Join our multinational team of intelligent, motivated, and collaborative people, and help us make financial protection accessible to all.

Under limited supervision, this role acts as a strategic bridge between technical security controls and enterprise compliance and risk requirements as part of a Service Now IRM/GRC implementation team supporting the Global Security Office (GSO) and Enterprise Risk initiatives. The position requires practical experience translating regulatory, risk, audit, and compliance requirements into production‑ready platform configurations, mappings, workflows, data models, and reporting analytics.

You will also validate requirements against user stories, coordinate UAT, support agile testing, and ensure release readiness.

The role requires a strong analytical and problem‑solving approach to operationalize GRC life cycles—including policy, compliance, risk, audit, and regulatory change management—and to clearly communicate complex IRM concepts and design decisions to both technical teams and business stakeholders. You will enable stakeholders through role‑based training, job aids, and awareness communications.

• Work with functional and technical requirements to design and implement within Service Now Enterprise IRM Application and automate where possible.
• Support and maintain ongoing processes, for Enterprise IRM Application with scope, product, and operational changes/maintenance.
• Capture, support, and validate requirements to technical developers and move along deployment lifecycle including user acceptance testing and agile testing—ensuring alignment between stories and stakeholders and converting processes into features/requirements for implementations.
• Understand dependencies as aligned to Service Now architectural requirements.
• Collaborate with compliance, security and risk professionals on projects related to compliance with regards to Security Frameworks (NIST CSF/SOX/DORA) and other regulations.
• Develop and administer just‑in‑time training and awareness campaigns for various IRM/GRC groups within the company, providing process improvement recommendations to mitigate risk, meet business obligations, and regulatory requirements.
• Facilitate incoming audits and assessments, coordinate discussions with appropriate owners and business stakeholders, and follow up on any remediation activities identified to meet associated due dates to ensure timely completion.
• Participate in the development of policies, standards, controls, procedures, and security and privacy audits and assessments.
• The scope of routine activities and tasks in this role will be in support of one or more functional areas, the department or division.
• Structure, scope, and compile data to support reporting.
• Perform other duties as assigned.

• Bachelor’s degree or equivalent experience (Required)
• Master’s degree or professional industry certification (Preferred)
• 4+ years of relevant experience in IT security, privacy, audit, controls and regulatory compliance, or related experience (Required)
• Deep understanding of Service Now platform and its capabilities, dependencies, proficiency in Service Now administration and development and architectural requirements with experience in Version(s) after Yokohama (Required)
• Service Now GRC framework and process administration (Regulatory Change Management a plus) (Required)
• General knowledge of business and technology operations; ability to work well within a team setting and maintain a high level of confidentiality (Required)
• Intermediate knowledge of global standards and regulations regarding security, privacy, and fraud (Required)
• Demonstrated ability to learn and stay current on data privacy, data security, and fraud threats and vulnerabilities (Required)
• Intermediate organizational, planning and task management skills with high attention to detail; ability to adjust to…