Business Information Security Manager US&I

Major accountabilities:

• This role is responsible for the information management and compliance of  the DDIT United States and International (US&I) business enablement function.  Oversee related projects and manage assigned resources and PMs. Act as Single Point of Contact (SPOC) for ISC. Ensure proper transition of activities in operation when required.

• Systematically supports implementation and monitoring of the ISC Policy Framework within the IT Functions and Business organization.
• Drives the implementation of the Policy Framework with the IT Function
• Ensures usage of the methodology, services, tools and templates provided by the central ISC teams.
• Ensures that key aspects of the ISC strategy as well as key ISC messages get communicated and distributed within the function.
• Act as single point of contact for the US&I DDIT group in all the matters related to Compliance/Security
• Assign ISC resources to the projects, prepare the project charters/capital requests, define resources required to execute
• ISC Escalation point for any project associated to US&I Division

Key performance indicators:

• Effective management of information risk and compliance status leading to reduced critical audit findings for a function or technology stack.
• Level of maturity of controls in projects and operations.
• Applications and projects are secure and compliant at launch .

Minimum Requirements:

Education:

• University working and thinking level, degree in business/technical/scientific area or comparable education/experience.

Experience:

• 10+ years of working experience, six or more working in an information security and/or compliance position.
• Three or more years’ experience leading a team of five or more individual

Desirable:

• Professional information security certification, such as CISSP, CISM or ISO 27001 auditor / practitioner
• Professional (information system) risk or audit certification such as CIA, CISA or CRISC
• Healthcare or Pharmaceutical Industry experience is Highly valuable.

Skills:

• Communication Skills.
• Governance Risk Management And Compliance (Grc).
• Influencing Skills.
• IT Governance.
• People Management.
• Quality Assurance.
• Senior Stakeholder Management.

Languages :

• English.