below marketmost similar roles pay hereabove market
This role pays less than
63%
of similar roles. Most pay
$134,850–$200,525
— the blue band above.
At the midpoint, this role pays about
$152k
versus about
$168k
for comparable roles.
Based on 240 similar postings.
Employer
About Pacific Life
Pacific Life is a life insurance company offering a wide range of life insurance, annuity, and investment products and services to individuals, businesses, and pension plans. Industry: Life Insurance & Annuities
Pacific Life currently has
57 open roles
on FindRole.
Listed pay typically runs
$145,080–$177,320
across 36 roles with salary data.
The Cyber Security Review Program Lead joins the Engineering department within the Operational Risk and Resilience team. This role involves owning the end-to-end design, governance, and continuous improvement of the Cyber Security Review program. You will identify, assess, and communicate cyber and IT risks associated with new purchases, projects, and technology changes. Daily responsibilities include leading reviews of technology projects, conducting re-reviews of critical applications to identify control gaps, and managing an external managed service provider. You will utilize deep technical experience to provide security assessments and develop scalable review processes. Key competencies include risk management aligned with NIST Cybersecurity Framework, COBIT 2019, or the NIST Privacy Framework. You will engage with stakeholders in Procurement and IT to embed risk identification into organizational decision-making and implementation.
Own the end-to-end design, governance, and continuous improvement of the Cyber Security Review program.
Lead security reviews for new technology projects, purchases, and organizational changes to identify and address risks.
Conduct re-reviews of critical applications to identify control gaps and areas requiring remediation.
Manage the relationship and oversight of the external managed service provider supporting the security review process.
Define and maintain program metrics and stakeholder communications to provide transparency into risk findings.
Identify and execute opportunities to improve program effectiveness through automation, tooling, and AI.
Align program strategy with broader service objectives and contribute to capability development roadmaps.
What we're looking for
6+ years of experience in security engineering, risk management, or a related technical discipline within a large enterprise environment.
Demonstrated experience owning or leading a security review, risk assessment, or related program including methodology design and process governance.
Deep technical experience across a broad range of technologies to support thorough and effective security assessments.
Experience conducting security reviews of technology projects, system changes, or application portfolios to identify control gaps and design weaknesses.
Strong process design and improvement experience to build structured, repeatable, and scalable review processes.
Experience engaging independently with technical and non-technical stakeholders to balance partnership with objective challenge.
Familiarity with project intake, change management, or architecture review processes (preferred).
Risk management experience aligned with frameworks such as NIST Cybersecurity Framework, COBIT 2019, or the NIST Privacy Framework (preferred).
Splunk
HBSS
Trellix
Ansible
CloudFormation
Python
PowerShell
AWS
Oracle
Cloud
IDS/IPS
VPN
Firewalls
SIEM
DevSecOps
GitHub
GitLab
SonarQube
Linux Red Hat
Windows
SolarWinds
Data Loss Prevention
Web-Proxy
Agile
STIG