RenaissanceRe is a leading writer of Property & Casualty Reinsurance. For over 25 years, we have helped customers and communities recover and build resilience through our industry-leading ability to understand risk, source efficient capital and rapidly pay claims.

Our global team shares a passion for solving our customers’ biggest problems through a collaborative and entrepreneurial culture that empowers employees and rewards creative thinking.

Position Overview: RenaissanceRe is looking to add a Security GRC Analyst to their Security team that will work across the entire security GRC space which includes getting involved with regulatory & audit

management, client due diligence, security awareness, policy management, 3rd party vendor assessments, security controls strategy, and other ad-hoc projects.

Essential Functions of the Position

Manage regulatory and internal audit activities, including planning, evidence collection, coordination with auditors, and timely remediation tracking to ensure continuous compliance with applicable laws, regulations, and internal policies.
Ensure client due diligences are completed, including responding to security questionnaires, supporting RFP and contract reviews, and presenting security controls to clients and prospects in a clear and accurate manner. 20
Conduct security awareness and training programs for employees, tailoring content to different audiences, tracking completion metrics, and measuring effectiveness to improve the organization’s overall security culture. 15
Provide governance over security policies, standards, guidelines, and other governance documents by drafting and updating documentation, coordinating stakeholder reviews, and ensuring alignment with regulatory, contractual, and industry best-practice requirements.
Assess 3rd party vendors for security and compliance risk by performing vendor due diligence, reviewing security attestations (such as SOC reports and certifications), identifying control gaps, and recommending risk treatment plans.
Bring forth security control improvement initiatives through risk assessments, control testing, metrics analysis, and post-incident reviews, then driving prioritized remediation efforts and tracking them to closure.

Requirements

A bachelor’s degree in Cyber Security, Information Technology, or a related field.
2 - 5 years of experience in cyber security.
Experience working in a global and matrixed organization across functions and geographies.
Audit like mindset to uncover control gaps and areas for improvement.
Excellent communication skills with internal and external parties.
Ability to keep meticulous records of activities performed.
Nice to have skills, but not required: PowerShell, Phyton, VBA
Certifications/Licensure Requirements
CompTIA Security+ or similar certification (E.g. CySA+, CISSP, CISA, CISM, CEH)

Our people are our most valuable resource and core to our success. This is a fast-paced business environment, demanding a strong work ethic and a results-oriented approach. We offer competitive compensation and benefits, a comprehensive talent development program, and a reward system in which employees share in the success of the company. We are an engaged member of the communities in which we live and work and have a locally-led giving philosophy with generous employee matching program, global and local community grants and employee volunteerism.

We seek diversity, create equity, and practice inclusion. Our people are at the heart of everything we do. We are an equal opportunity employer. We provide equal opportunity to all qualified individuals regardless of race, color, religion, national origin, sex, sexual orientation, gender identity, marital status, pregnancy, disability, military status or other legally protected categories.

Security GRC Analyst

Job Description