Senior Level Information Security Specialist Jobs
Senior level information security specialist jobs place experienced professionals in charge of security architecture decisions, enterprise risk programs, and the teams and initiatives that put those strategies into practice. Openings concentrate across Consulting & Professional Services, Technology & Software, and Education, with 78% of roles available remotely or hybrid, and employers like SentiLink, Match, and MTSI hiring at this level now.
Find JobsOverview
Showing 5 of 42+ Senior Level Information Security Specialist jobs
INTRODUCTION
You desire impactful work.
You’re RGA ready
RGA is a purpose-driven organization working to solve today’s challenges through innovation and collaboration. A Fortune 200 Company and listed among its World’s Most Admired Companies, we’re the only global reinsurance company to focus primarily on life- and health-related solutions. Join our multinational team of intelligent, motivated, and collaborative people, and help us make financial protection accessible to all.
ROLE AND RESPONSIBILITIES
Leads the design and delivery of security data engineering and intelligence capabilities that integrate, correlate, enrich, and operationalize data across security, governance, cloud, application, endpoint, vulnerability, and risk platforms. Builds governed, reusable data products and analytics that improve risk prioritization, remediation effectiveness, control visibility, and measurement of security outcomes. Serves as a hands-on technical lead, leads small and complex cross-functional initiatives, mentors technical staff, and partners with leaders, control owners, remediation teams, Enterprise Data Platform teams, and other stakeholders. Helps define, build, validate, and socialize trusted KPIs, KRIs, control-effectiveness measures, and outcome-based metrics that support clear accountability and measurable risk reduction.
Principle Duties
- Leads the design and delivery of complex security data engineering initiatives and small cross-functional project teams, providing technical direction from solution design through implementation and operational ownership.
- Ingests and integrates data from security, governance, cloud, application, endpoint, vulnerability, identity, and risk platforms using scalable data pipelines, applications, APIs, and automation.
- Deduplicates, correlates, and enriches security findings with asset, ownership, business, control, and risk context to produce actionable intelligence.
- Designs and delivers governed security data products through RGA’s Enterprise Data Platform, using Snowflake and enterprise data-engineering patterns to make security information reusable, trusted, and accessible.
- Develops and optimizes Snowflake data models, SQL transformations, queries, and compute patterns while managing data quality, performance, access, traceability, and cost.
- Partners with Enterprise Data Platform, Data Governance, and security teams to establish sustainable ingestion, transformation, role-based access, lineage, metadata, data-quality, and lifecycle practices.
- Co-develops KPIs, KRIs, control-effectiveness measures, thresholds, targets, and supporting calculation methodologies aligned with security strategy, risk objectives, and technical standards.
- Establishes metric governance through documented definitions, authoritative data sources, ownership, data-quality checks, refresh cadence, version control, and traceability to underlying risks, controls, and remediation workflows.
- Socializes metrics with leaders, control owners, and remediation teams by translating technical results into clear risk narratives, validating definitions and assumptions, and connecting executive indicators to accountable teams and actions.
- Develops tool-agnostic dashboards, scorecards, reporting capabilities, and reusable services with drill-through from leadership indicators to supporting assets, controls, findings, and remediation work.
- Identifies trends, systemic risks, concentrations of exposure, control gaps, and remediation opportunities, and provides clear recommendations to technical teams and leadership.
- Builds strong data foundations for security automation and future AI-enabled and Model Context Protocol-based capabilities.
- Technically mentors associates, establishes engineering standards, guides design and peer reviews, and provides training and knowledge sharing as required.
- Evaluates new security, data, and analytics technologies and recommends solutions that maximize business value while reducing manual effort and unnecessary vendor dependency.
- Communicates architecture, tradeoffs, delivery status, risks, and recommendations clearly to technical teams, leaders, and business stakeholders.
Success Measures
- Security data from multiple platforms is consistently integrated, normalized, enriched, governed, and available for decision-making.
- Leaders, control owners, and remediation teams share trusted definitions for KPIs, KRIs, controls, thresholds, targets, and ownership, with clear links to prioritized actions.
- Executive indicators provide concise risk and performance narratives with drill-through to the teams, assets, controls, and remediation work driving the result.
- Security data is delivered through reusable Enterprise Data Platform and Snowflake data products rather than isolated pipelines, manual extracts, or tool-specific reporting.
- Manual integration and reporting effort is reduced through scalable automation, reusable engineering patterns, and documented ownership.
- RGA can better quantify material exposure, control coverage, remediation effectiveness, security debt, and the business value of security initiatives.
- Small team projects are delivered with strong technical direction, stakeholder alignment, sustainable ownership, and measurable outcomes.
BASIC QUALIFICATIONS
Education
Required
- Bachelor’s degree in Arts/Sciences (BA/BS) or equivalent experience
Preferred
- Master’s degree in Arts/Sciences (MA/MS) or relevant professional industry certification
- CISSP, CISA, CCSP, CGRC, Comptia CASP+, OSCP, CEH Certifications
Work Experience
Required
- 6+ years of experience in security engineering, information systems, data engineering, security analytics, application development, or a closely related discipline, including significant hands-on security technical delivery.
- Demonstrated experience leading technical projects or small project teams, guiding solution design, mentoring others, and driving work through delivery.
Preferred
- Experience managing and developing security data products, analytics, reporting, or metrics within a governed enterprise data environment.
Preferred Technical Experience
- Experience with Snowflake, dbt, Airflow, Atlan, Power BI, Git-based development workflows, infrastructure as code, CI/CD, containers, or serverless application patterns.
- Experience with security platforms such as Wiz, GitHub Advanced Security, GitGuardian, CrowdStrike, Tenable, Nucleus, LogicGate, or comparable technologies.
- Knowledge of exposure management, vulnerability prioritization, risk-based remediation, security program measurement, and control-effectiveness reporting.
- Experience with AI-enabled integrations, automation, or Model Context Protocol.
- Relevant cloud, security, data engineering, analytics, or architecture certifications.
Skills and Abilities
Required
- Strong information security knowledge and the ability to work with vulnerability, exposure, cloud, application, endpoint, identity, governance, and control data.
- Experience defining and operationalizing KPIs, KRIs, control measures, and outcome-based metrics, including calculation logic, thresholds, targets, ownership, and validation.
- Working knowledge of governed data-product practices, including role-based access, lineage, metadata, data quality, ownership, and secure data sharing.
- Experience with security analytics, business intelligence, dashboard development, data visualization, and executive or operational reporting.
- Advanced hands-on skill with Python, SQL, APIs, data modeling, databases, and automated data pipelines.
- Experience building analytical models, pipelines, or data products on Snowflake, an enterprise data platform, or a comparable cloud data ecosystem.
- Experience designing, developing, deploying, and operating applications or data services in AWS or another major cloud platform.
- Advanced oral and written communication skills, including the ability to explain complex technical and risk concepts to leaders, control owners, engineers, and remediation teams.
- Advanced ability to translate business and security needs into maintainable technical solutions, measurable outcomes, and actionable recommendations.
- Advanced investigative, analytical, problem-solving, stakeholder-management, change-management, negotiation, and influence skills.
- Ability to balance strategic architecture with hands-on engineering, manage competing priorities, and operate effectively with limited direction.
- Ability to work effectively across technical, operational, risk, governance, and business functions.
COMPENSATION RANGE
$126,710.00 - $188,840.00 Annual
Base pay varies depending on job-related knowledge, skills, experience and market location. In addition, RGA provides an annual bonus plan that includes all roles and some positions are eligible for participation in our long-term equity incentive plan. RGA also maintains a full range of health, retirement, and other employee benefits.
What you can expect from RGA:
- Gain valuable knowledge from and experience with diverse, caring colleagues around the world.
- Enjoy a respectful, welcoming environment that fosters individuality and encourages pioneering thought.
- Join the bright and creative minds of RGA, and experience vast, endless career potential.
We’re excited to get to know you and connect your unique skills with our global opportunities. To create a modern and seamless experience, we use artificial intelligence (AI) in parts of our preliminary screening process. This technology helps us personalize job recommendations, automate interview scheduling, evaluate candidates based solely on experience—without considering name, gender, or other personal details—and provide real-time answers through our chatbot. AI is used only during early screening and never makes hiring decisions. Your RGA recruiter will work closely with you every step of the way to ensure the process feels personal, thoughtful, and focused on you.
RGA is an equal opportunity employer. Qualified applicants will be considered without regard to race, color, age, gender identity or expression, sex, disability, veteran status, religion, national origin, or any other characteristic protected by applicable equal employment opportunity laws.
INTRODUCTION
You desire impactful work.
You’re RGA ready
RGA is a purpose-driven organization working to solve today’s challenges through innovation and collaboration. A Fortune 200 Company and listed among its World’s Most Admired Companies, we’re the only global reinsurance company to focus primarily on life- and health-related solutions. Join our multinational team of intelligent, motivated, and collaborative people, and help us make financial protection accessible to all.
ROLE AND RESPONSIBILITIES
Leads the design and delivery of security data engineering and intelligence capabilities that integrate, correlate, enrich, and operationalize data across security, governance, cloud, application, endpoint, vulnerability, and risk platforms. Builds governed, reusable data products and analytics that improve risk prioritization, remediation effectiveness, control visibility, and measurement of security outcomes. Serves as a hands-on technical lead, leads small and complex cross-functional initiatives, mentors technical staff, and partners with leaders, control owners, remediation teams, Enterprise Data Platform teams, and other stakeholders. Helps define, build, validate, and socialize trusted KPIs, KRIs, control-effectiveness measures, and outcome-based metrics that support clear accountability and measurable risk reduction.
Principle Duties
- Leads the design and delivery of complex security data engineering initiatives and small cross-functional project teams, providing technical direction from solution design through implementation and operational ownership.
- Ingests and integrates data from security, governance, cloud, application, endpoint, vulnerability, identity, and risk platforms using scalable data pipelines, applications, APIs, and automation.
- Deduplicates, correlates, and enriches security findings with asset, ownership, business, control, and risk context to produce actionable intelligence.
- Designs and delivers governed security data products through RGA’s Enterprise Data Platform, using Snowflake and enterprise data-engineering patterns to make security information reusable, trusted, and accessible.
- Develops and optimizes Snowflake data models, SQL transformations, queries, and compute patterns while managing data quality, performance, access, traceability, and cost.
- Partners with Enterprise Data Platform, Data Governance, and security teams to establish sustainable ingestion, transformation, role-based access, lineage, metadata, data-quality, and lifecycle practices.
- Co-develops KPIs, KRIs, control-effectiveness measures, thresholds, targets, and supporting calculation methodologies aligned with security strategy, risk objectives, and technical standards.
- Establishes metric governance through documented definitions, authoritative data sources, ownership, data-quality checks, refresh cadence, version control, and traceability to underlying risks, controls, and remediation workflows.
- Socializes metrics with leaders, control owners, and remediation teams by translating technical results into clear risk narratives, validating definitions and assumptions, and connecting executive indicators to accountable teams and actions.
- Develops tool-agnostic dashboards, scorecards, reporting capabilities, and reusable services with drill-through from leadership indicators to supporting assets, controls, findings, and remediation work.
- Identifies trends, systemic risks, concentrations of exposure, control gaps, and remediation opportunities, and provides clear recommendations to technical teams and leadership.
- Builds strong data foundations for security automation and future AI-enabled and Model Context Protocol-based capabilities.
- Technically mentors associates, establishes engineering standards, guides design and peer reviews, and provides training and knowledge sharing as required.
- Evaluates new security, data, and analytics technologies and recommends solutions that maximize business value while reducing manual effort and unnecessary vendor dependency.
- Communicates architecture, tradeoffs, delivery status, risks, and recommendations clearly to technical teams, leaders, and business stakeholders.
Success Measures
- Security data from multiple platforms is consistently integrated, normalized, enriched, governed, and available for decision-making.
- Leaders, control owners, and remediation teams share trusted definitions for KPIs, KRIs, controls, thresholds, targets, and ownership, with clear links to prioritized actions.
- Executive indicators provide concise risk and performance narratives with drill-through to the teams, assets, controls, and remediation work driving the result.
- Security data is delivered through reusable Enterprise Data Platform and Snowflake data products rather than isolated pipelines, manual extracts, or tool-specific reporting.
- Manual integration and reporting effort is reduced through scalable automation, reusable engineering patterns, and documented ownership.
- RGA can better quantify material exposure, control coverage, remediation effectiveness, security debt, and the business value of security initiatives.
- Small team projects are delivered with strong technical direction, stakeholder alignment, sustainable ownership, and measurable outcomes.
BASIC QUALIFICATIONS
Education
Required
- Bachelor’s degree in Arts/Sciences (BA/BS) or equivalent experience
Preferred
- Master’s degree in Arts/Sciences (MA/MS) or relevant professional industry certification
- CISSP, CISA, CCSP, CGRC, Comptia CASP+, OSCP, CEH Certifications
Work Experience
Required
- 6+ years of experience in security engineering, information systems, data engineering, security analytics, application development, or a closely related discipline, including significant hands-on security technical delivery.
- Demonstrated experience leading technical projects or small project teams, guiding solution design, mentoring others, and driving work through delivery.
Preferred
- Experience managing and developing security data products, analytics, reporting, or metrics within a governed enterprise data environment.
Preferred Technical Experience
- Experience with Snowflake, dbt, Airflow, Atlan, Power BI, Git-based development workflows, infrastructure as code, CI/CD, containers, or serverless application patterns.
- Experience with security platforms such as Wiz, GitHub Advanced Security, GitGuardian, CrowdStrike, Tenable, Nucleus, LogicGate, or comparable technologies.
- Knowledge of exposure management, vulnerability prioritization, risk-based remediation, security program measurement, and control-effectiveness reporting.
- Experience with AI-enabled integrations, automation, or Model Context Protocol.
- Relevant cloud, security, data engineering, analytics, or architecture certifications.
Skills and Abilities
Required
- Strong information security knowledge and the ability to work with vulnerability, exposure, cloud, application, endpoint, identity, governance, and control data.
- Experience defining and operationalizing KPIs, KRIs, control measures, and outcome-based metrics, including calculation logic, thresholds, targets, ownership, and validation.
- Working knowledge of governed data-product practices, including role-based access, lineage, metadata, data quality, ownership, and secure data sharing.
- Experience with security analytics, business intelligence, dashboard development, data visualization, and executive or operational reporting.
- Advanced hands-on skill with Python, SQL, APIs, data modeling, databases, and automated data pipelines.
- Experience building analytical models, pipelines, or data products on Snowflake, an enterprise data platform, or a comparable cloud data ecosystem.
- Experience designing, developing, deploying, and operating applications or data services in AWS or another major cloud platform.
- Advanced oral and written communication skills, including the ability to explain complex technical and risk concepts to leaders, control owners, engineers, and remediation teams.
- Advanced ability to translate business and security needs into maintainable technical solutions, measurable outcomes, and actionable recommendations.
- Advanced investigative, analytical, problem-solving, stakeholder-management, change-management, negotiation, and influence skills.
- Ability to balance strategic architecture with hands-on engineering, manage competing priorities, and operate effectively with limited direction.
- Ability to work effectively across technical, operational, risk, governance, and business functions.
COMPENSATION RANGE
$126,710.00 - $188,840.00 Annual
Base pay varies depending on job-related knowledge, skills, experience and market location. In addition, RGA provides an annual bonus plan that includes all roles and some positions are eligible for participation in our long-term equity incentive plan. RGA also maintains a full range of health, retirement, and other employee benefits.
What you can expect from RGA:
- Gain valuable knowledge from and experience with diverse, caring colleagues around the world.
- Enjoy a respectful, welcoming environment that fosters individuality and encourages pioneering thought.
- Join the bright and creative minds of RGA, and experience vast, endless career potential.
We’re excited to get to know you and connect your unique skills with our global opportunities. To create a modern and seamless experience, we use artificial intelligence (AI) in parts of our preliminary screening process. This technology helps us personalize job recommendations, automate interview scheduling, evaluate candidates based solely on experience—without considering name, gender, or other personal details—and provide real-time answers through our chatbot. AI is used only during early screening and never makes hiring decisions. Your RGA recruiter will work closely with you every step of the way to ensure the process feels personal, thoughtful, and focused on you.
RGA is an equal opportunity employer. Qualified applicants will be considered without regard to race, color, age, gender identity or expression, sex, disability, veteran status, religion, national origin, or any other characteristic protected by applicable equal employment opportunity laws.
See All 42 Senior Level Information Security Specialist Jobs
Find roles that match your experience and apply in just a few clicks.
Find JobsSenior Level Information Security Specialist Job Market
Who's Hiring
Top Industries Hiring
- Consulting & Professional Services
- Technology & Software
- Education
- Investment & Asset Management
- Healthcare & Medical Services
Senior Level Information Security Specialist Jobs: Frequently Asked Questions
How do I get a senior level information security specialist job?
Employers hiring at the senior level want candidates who have owned security programs end to end, not just contributed to them. Demonstrable experience leading incident response, architecting zero-trust or cloud security frameworks, and influencing security policy across an organization carries the most weight. Certifications like CISSP or CISM signal depth, but concrete outcomes, such as reduced breach exposure or improved compliance posture, close the gap.
Which companies hire senior level information security specialists?
Companies hiring senior level information security specialists right now include SentiLink, Match, and MTSI, based on current listings on Migrate Mate as of November 2026. Hiring at this level tends to come from large enterprises, government contractors, financial institutions, and technology firms with mature security functions that need experienced professionals to lead programs rather than fill individual contributor seats.
Are there remote senior level information security specialist jobs?
Yes, though availability varies by employer and the sensitivity of the work involved. About 78% of senior level information security specialist openings are remote or hybrid as of November 2026, reflecting the field's capacity for distributed security operations alongside roles that require on-site access to classified environments or sensitive infrastructure.
What makes an information security specialist role senior level?
Senior level information security specialist roles are defined by ownership of security outcomes rather than execution of individual tasks. Professionals at this stage set security standards, lead cross-functional initiatives, mentor junior and mid-level analysts, and engage directly with executive stakeholders on risk decisions. The scope typically covers an entire program, business unit, or product line, not a single control or system.
Which industries hire the most senior level information security specialists?
Senior level information security specialist roles concentrate in Consulting & Professional Services, Technology & Software, and Education, based on current listings on Migrate Mate as of November 2026. These sectors drive demand because they operate under strict regulatory requirements, manage high-value data assets, or maintain critical infrastructure, all of which require experienced security professionals who can own compliance, risk, and response programs at scale.