Information Security Compliance Specialist

This role involves providing security consulting and assurance for assigned platforms, focusing on risk assessment, security vulnerability evaluations, and compliance. The role also involves overseeing interns and contractors, supporting advanced therapies projects, and tracking security metrics and reports.

Responsibilities:

• Performing risk calculators to identify high risk applications/projects; for those identified, performing application security questionnaires/assessments, identifying security gaps and appropriate remediation actions
• Support Pen Test executions for Key Advanced Therapies applications, identifying remediation plans for issues identified;
• Performing Incident trending to ensure security root causes are identified and remediated
• Evaluating static & dynamic vulnerabilities to identify TLM/ALM & other security issues along with the appropriate remediation actions.
• Large experience in SOX, IAPP, GxP, Privacy compliance requirements
• Provide local oversite for interns, employees/Contractors under my responsibility
• Support Key Advanced Therapies projects: o Providing a central point for SC security questions or queries on project support, connecting with the appropriate ISRM team member to ensure complete and accurate responses and/or appropriate involvement
• Navigating between all ISRM SC pillars to obtain knowledge regarding security issues
• Ensures appropriate controls are implemented for Car-T Applications and coordinates alignment with Internal Audit and IT Compliance
• Provide metrics and reports on a weekly basis tracking the entire portfolio, application assessment status, and Risk Acceptance status.

Qualifications:

• Minimum of a Bachelor's degree in Information Security, Cybersecurity or equivalent
• 5+ years of Information Security Compliance experience is required
• Sox/Audit experience in pharmaceutical industry is require.
• Must have Cloud-based software controls OT and application security assessment experience
• Excellent written and verbal communication skills is required