A biotech company in New Jersey is seeking a new IT Security Manager to join their team in Middlesex County. This hybrid role will focus on third-party cyber risk management, security assurance, and audit-related activities across a global environment.
About the Opportunity:
Shift: Day
Schedule: Monday to Friday
Hours: Standard business
Setting: Hybrid (at least 2 days a week onsite)
Responsibilities:
Lead third-party cyber risk management activities, including security assessments, controls, and risk tracking
Develop and maintain security standards, documentation, metrics, and reporting for vendor-related risk
Support audit planning and execution, including assurance reviews and audit calendars
Collaborate with Procurement, Legal, Privacy, Compliance, and QA partners to align security requirements
Monitor supplier risk trends and contribute to security improvement roadmaps and remediation efforts
Qualifications:
At least 5 years of experience in Third-Party Cyber Risk Management, Information Security, or Risk Management
Bachelor's degree in Computer Science, MIS, or a related field, or an equivalent combination of relevant experience and training
Experience with Security and Risk Management frameworks and regulations, such as ISO, NIST, GDPR, SOX, HIPAA, FISMA, and GxP
Experience with GRC tools, such as ServiceNow, Galvanize, Vanta, MetricStream, Archer, or WolfPAC
Desired Skills:
Experience in a pharmaceutical, biotech, or healthcare environment
Strong understanding of vendor management processes and assurance frameworks, including SOC 1 and SOC 2 audits
Experience working in multinational organizations and global virtual teams
Strong business acumen and stakeholder communication skills
Experience developing audit roadmaps, dashboards, and key risk indicators
