Staff Cybersecurity Architect - Data Security & Data Loss Prevention at Reinsurance Group of America

, Missouri, United States -

Full Time

Start Date

Immediate

Expiry Date

04 Sep, 26

Salary

224640.0

Posted On

06 Jun, 26

Experience

10 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Data Security Architecture, Data Loss Prevention, Microsoft Purview, Microsoft Defender, Varonis Data Security, Zero Trust Principles, NIST Framework, PKI Management, Data Classification, Cloud Security, Security Automation, Cryptographic Controls, Audit Readiness, Risk Mitigation, Technical Leadership, Identity Security

Industry

Insurance

Description

You desire impactful work. You’re RGA ready RGA is a purpose-driven organization working to solve today’s challenges through innovation and collaboration. A Fortune 200 Company and listed among its World’s Most Admired Companies, we’re the only global reinsurance company to focus primarily on life- and health-related solutions. Join our multinational team of intelligent, motivated, and collaborative people, and help us make financial protection accessible to all. The Staff Cybersecurity Architect – Data Security & Data Loss Prevention is a senior technical leader responsible for designing, implementing, validating, and continuously measuring enterprise data security posture, data protection controls, and reference architectures. This role ensures data protection controls are embedded throughout endpoint, identity, collaboration, storage, data platforms and cryptographic trust services, applying secure by design and zero trust principles across multi-cloud, SaaS, and on premises environments. The Data Security & Data Loss Prevention architect operates at the intersection of architecture, engineering, and audit readiness, proactively translating regulatory and business risk into deployable, testable, and measurable controls. The architect will champion controls that are not only well designed but operationalized, continuously validated, and demonstrably effective. Through close collaboration with platform stakeholders and service owners, the role advances the organization’s data protection maturity while enabling scalable, audit ready defenses. Principle Duties Develop, maintain, and evolve enterprise data security and data loss prevention architectures aligned to business objectives, regulatory requirements, and data classification standards. Champion the integration of datacentric security controls across endpoint, identity, collaboration, storage, and data platforms, ensuring secure by default and least privilege principles. Design and operationalize Microsoft Purview Information Protection and DLP capabilities, including sensitivity labeling, classification, policy enforcement, and user experience considerations. Architect and implement Microsoft Defender capabilities (Endpoint, Identity, Office 365, Cloud Apps) to protect data throughout its lifecycle. Serve as a senior technical authority for data security and DLP across Windows, macOS, Windows Server, and Linux environments, ensuring consistent enforcement across heterogeneous platforms. Integrate Microsoft Security capabilities with complementary platforms such as Varonis Data Security to provide comprehensive data protection. Author and maintain data security and DLP standards, reference architectures, and technical guardrails aligned to NIST and internal security frameworks. Convert business risks and regulatory obligations into technical requirements and traceable, measurable mitigation strategies. Evaluate new platforms, tools, and vendors for strategic fit, security posture, and architectural impact. Provide technical leadership, mentorship, and escalation support for complex data security and DLP challenges. Communicate control posture, risks, and recommendations clearly to engineering, audit, and leadership stakeholders. Continuously assess and improve data security posture through metrics, dashboards, and control validation. Collaborate with PKI teams to manage certificate lifecycle operations, including issuance, renewal, revocation, and inventory. Perform other duties as assigned. Education Bachelor’s degree in arts/sciences (BA/BS) or equivalent experience – Required Active CIPT, CDPSE, CISSP certification – Preferred Additional certifications (e.g., Microsoft SC100/SC400/AZ500, Varonis DSE, CDP, CISA, GIAC, CCSP) – Preferred Work Experience 8+ years of progressive experience in information technology security/infrastructure engineering/architecture – Required 6+ years of data security and data loss prevention control implementation/architecture experience focused on technical control design, implementation, and validation in enterprise environments - Required Demonstrated success designing and deploying enterprise data security and data loss prevention technology controls, platforms, and programs – Required Deep understanding of industry best practices, ISO 27001/27701, SOC 2 and NIST aligned compliance and security frameworks, particularly as they relate to data protection and DLP – Required Strong technical background in data classification, Varonis Data Security, Microsoft Purview, and Microsoft Defender security suite across hybrid on-premise and multi-cloud infrastructure. – Required Proven experience supporting audit, regulatory, or certification efforts through technical control implementation and validation – Required Ability to map and document complex systems and data flows; advanced analytical and problem-solving skills, including competency with tooling such as Lucid chart, Visio, Excel – Required Advanced analytical and problem solving skills with strong attention to detail – Required Advanced oral and written communication skills, with a strong ability to work collaboratively to convey technical concepts to engineering, audit, and leadership audiences fostering an outcome focused environment – Required Demonstrated capability to analyze, operationalize, and continuously improve security controls and business processes – Required Hands on experience automating security controls, validation testing, and evidence collection using scripting, APIs, or SOAR platforms – Required Strong understanding of cryptographic controls, certificate‑based authentication, mutual TLS, and their role in zero trust and data protection architectures – Preferred Demonstrated experience designing, operating, or modernizing enterprise PKI solutions, including certificate lifecycle management, trust models, and integration with identity and infrastructure platforms – Preferred Experience implementing automation for certificate issuance, renewal, revocation, and inventory using native tooling, scripting, APIs, or platform‑integrated services – Preferred Proven ability to influence outcomes and drive adoption in a matrixed organization without direct authority – Preferred #LI-CW1 #LI-Remote What you can expect from RGA: Gain valuable knowledge from and experience with diverse, caring colleagues around the world. Enjoy a respectful, welcoming environment that fosters individuality and encourages pioneering thought. Join the bright and creative minds of RGA, and experience vast, endless career potential. We’re excited to get to know you and connect your unique skills with our global opportunities. To create a modern and seamless experience, we use artificial intelligence (AI) in parts of our preliminary screening process. This technology helps us personalize job recommendations, automate interview scheduling, evaluate candidates based solely on experience—without considering name, gender, or other personal details—and provide real-time answers through our chatbot. AI is used only during early screening and never makes hiring decisions. Your RGA recruiter will work closely with you every step of the way to ensure the process feels personal, thoughtful, and focused on you. Compensation Range: $150,770.00 - $224,640.00 Annual Base pay varies depending on job-related knowledge, skills, experience and market location. In addition, RGA provides an annual bonus plan that includes all roles and some positions are eligible for participation in our long-term equity incentive plan. RGA also maintains a full range of health, retirement, and other employee benefits. RGA is an equal opportunity employer. Qualified applicants will be considered without regard to race, color, age, gender identity or expression, sex, disability, veteran status, religion, national origin, or any other characteristic protected by applicable equal employment opportunity laws. Understanding RGA's story starts with getting to know us. Driven by our purpose, we work to solve today’s challenges while looking ahead to tomorrow. We are thinkers, creators, and innovators. We are each unique, yet we share a belief that change happens when people collaborate for good. We work to make a difference every day at RGA.

Responsibilities

Design and implement enterprise data security and DLP architectures across multi-cloud and on-premises environments. Translate regulatory risks into measurable technical controls while managing PKI operations and collaborating with platform stakeholders.