Information Technology Security Manager

Minimum 5 years of experience in TPCRM information security and risk management Experience defining and implementing security management processes and controls Experience setting up a TPCRM security improvement roadmap and driving the implementation of corresponding actions and processes Experience tracking, measuring, and communicating the quality of risk management processes and controls applicable to the IT department Experience working with security and risk management frameworks and regulations (e.g., ISO, NIST, GDPR, SOX, HIPAA, etc.) Good understanding of current and emerging cybersecurity and privacy regulations and practices, and how other enterprises are employing them Experience working with GRC tools (e.g., ServiceNow, Galvanize, Vanta, MetricStream, Archer, WolfPAC, etc.) Excellent understanding of vendor management processes and related assurance frameworks (e.g., SOC 1 and SOC 2, Type I/II audits, and auditor reports) Certified CISA, CRISC, CISM, CISSP, or relevant certification Experience in a Pharma / Biotech / Healthcare company preferred Good knowledge of regulatory compliance frameworks applicable to a multinational Pharma / Biotech company (e.g., FISMA, GDPR, NIST, GxP) Strong business acumen, including domain-specific knowledge of Pharma / Biotech Experience working in multinational organizations and global virtual teams Knowledge / Skills Excellent analytical and technical skills Excellent communication skills to connect effectively with different stakeholders and to deal with the different interests in the organization Excellent written, verbal, communication, and presentation skills Strong soft and interpersonal skills, including teamwork, facilitation, and negotiation Excellent planning and organizational skills, with strong attention to detail Enable proactive identification and resolution of risks by collaborating across multiple teams Foster strong relationships with colleagues and business leaders to enable risk mitigation through effective communication of TPCRM risk status to key stakeholders Lead and contribute to outcomes for risk assessments, security improvements, and audit remediations Support alignment of security operations to policies, standards, and procedures Contribute to, maintain, and report on Key Performance Indicators (KPI) and Key Risk Indicators (KRI) Keen sense of self, ethics, and effort, as well as the willingness to go the extra mile to achieve important goals Position Summary Collaboration with third parties is of strategic value. This collaboration includes the exchange of confidential information and personal data, and the outsourcing of digital services. Trust and assurance are critical factors in the relationship with partners and suppliers, requiring assessment of their capabilities with respect to security, compliance, quality, and risk management. The TPCRM Risk Manager is responsible for organizing and driving activities around TPCRM security and audits. This role requires a mix of business and technical acumen to influence and communicate with stakeholders across the enterprise. Create awareness and educate stakeholders on TPCRM security, acting as an important link in establishing trusted relationships with partners and suppliers. Ensure that the organization remains in control of critical data in the context of an increasing security threat landscape. #J-18808-Ljbffr C&G Consulting Services, Inc