Information Technology Security Manager

IT Security Manager – Third Party Cyber Risk Management (Contract)

Scroll down to find an indepth overview of this job, and what is expected of candidates Make an application by clicking on the Apply button.

I'm partnering with a leading biotechnology company seeking an experienced IT Security Manager to support enterprise-wide Third-Party Cyber Risk Management (TPCRM), vendor security governance, cybersecurity audits, and regulatory compliance initiatives.

Requirements

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or a related field

5+ years of experience in information security, third-party cyber risk management (TPCRM), or IT risk management

• Experience within Pharma, Biotech, Healthcare, or other highly regulated environments

• Strong knowledge of security and compliance frameworks including NIST, ISO 27001, GDPR, SOX, HIPAA, FISMA, and GxP

• Experience conducting vendor security assessments, supplier risk reviews, and third-party security evaluations

• Experience reviewing SOC 1/SOC 2 reports, audit findings, and security assurance documentation

• Experience using GRC platforms such as ServiceNow, Archer, MetricStream, Galvanize, Vanta, or similar tools

• Professional certifications such as CISSP, CISM, CRISC, or CISA preferred

• Experience working within global organizations and cross-functional teams

Responsibilities

• Support and enhance the organization's Third-Party Cyber Risk Management (TPCRM) program

• Develop, maintain, and improve vendor security standards, processes, and documentation

• Conduct security risk assessments and manage supplier remediation activities

• Evaluate vendor security controls, compliance evidence, and assurance reports

• Develop and maintain TPCRM metrics, KPIs, KRIs, and executive reporting

• Monitor and communicate third-party security risks across the business

• Partner with Procurement, Legal, Compliance, Privacy, Quality, and IT stakeholders to align security requirements

• Drive initiatives supporting compliance with evolving cybersecurity regulations, including NIS2

• Develop and execute cybersecurity audit programs and risk-based audit plans

• Track audit findings, remediation efforts, and continuous improvement initiatives

• Support implementation of security controls, risk management processes, and governance frameworks

• Guide business teams on xhyhwjd security requirements, risk mitigation, and best practices

Preferred

• Experience building or improving enterprise TPCRM programs

• Strong understanding of vendor assurance frameworks and audit methodologies

• Experience establishing cybersecurity governance and audit functions

• Knowledge of emerging cybersecurity threats, regulations, and industry best practices

• Strong communication, stakeholder management, and presentation skills

• Excellent analytical, organizational, and problem-solving abilities

Location: Remote/Hybrid

Duration: 6-Month Contract

Interviews are starting soon, so if you're interested and would like to be considered, give me a call at View phone number on manufacturingworkers.com as soon as you're available.