Description

Work location: Remote; Hybrid (3 days/week in Raritan) preferred.

Top Three Skills: degree in Computer science/Information tech, verbal skills, consulting stakeholders

Assessment CoE Analyst

PURPOSE OF POSITION

• In the Assessment CoE Analyst role you will work within the Information Security and Risk Management (ISRM) department, joining the team responsible for ensuring the security of software applications.
• You will be responsible for security & controls throughout global projects related to R&D, Supply Chain, and Medical Technology applications including both 3rd party and internally developed applications.

RESPONSIBILITIES/PRINCIPAL DUTIES

Primary responsibilities include the following:

• Orchestrate and deliver cybersecurity risk assessments client Applications, and the technologies that run them while maintaining awareness of the changing threat landscape.
• Support the design of cybersecurity controls, ensure proper design implementation and assurance testing.
• Responsible for identifying risks related to the application prior to go-live and ensuring that appropriate mitigation/remediation plans are in place.
• Understand and promote risk management activities associated with external regulations and internal client policies such as client Internal Asset Protection Policies (IAPP), GxP, SOX, and GDPR
• Facilitate education and training to the program team on cybersecurity and internal control procedures and controls.
• Provide a periodic work status update in the form of a summary slide of accomplishments, blockers, risks.

EXPERIENCE/COMPETENCIES

• Minimum 5 years’ experience working with security and controls, consulting stakeholders throughout the application lifecycle development process
• Experienced in identifying and articulating Controls/gaps around application security issues
• Experienced in SOX compliance requirement/ IT General Controls
• Experience in supporting internal and external Audits.
• Self-starter and proficient multitasker with excellent documentation, communication, and organizational skills
• Strong technical skills, including troubleshooting acumen for complex issues in need of problem solving.
• Strong teamwork and communication/information sharing skills.
• Exercise judgment and influence on key processes and technical decisions (e.g. - policy, standards, technical solutions).

Education 

• Bachelor’s Degree in Information Technology, Computer Science, or a related field