Tech Lead, IT Security
- Baxter
- 8 to 10 Yrs
- Bengaluru
- 6 years ago
- Email to a friend
- Report this job
Job Description
- Prepare and present business oriented cyber risk management communication to leaders, including to senior executives. Communication may also extend to risk management presentations to industry and government forums
- Lead and oversee the process for identifying and routinely re-evaluating principal information and cybersecurity risks, as aligned to the primary business functions and business areas, including medical devices and manufacturing, of the global enterprise. This critical responsibility establishes the foundation for global information risk management, guiding the overall approach to setting priorities and allocating risk management capital and human resources
- Define and develop Information Security policies and standards using industry best practices and frameworks, in alignment with business needs and other business and IT policies
- Lead a coordinated strategy to the design and implementation of programs for evaluating new and emerging risks. These include cloud, mobile, analytics, social and 3rd-party risks
- Oversee identification, management and protection of data in accordance with its value and risk, and retained in pursuant to applicable legal and regulatory requirements
- Lead and oversee cybersecurity communication and education activities on security matters through new and existing channels for the global enterprise
- Oversee and ensure medical devices post market compliance and superior customer service
- Guide and oversee Baxter s information governance program
- Develop strong relationships and work with business counterparts, GLT and other Business and Technology teams in defining the information security strategy and governance processes
- Represent the IT Security organization and collaborate in enterprise risk management and compliance activities to understand and set business expectations, and align global IT goals and objectives with business risk and priorities
- Ensure that an appropriate system of controls is in place and that the requisite level of compliance, commensurate with risks, is implemented throughout the global enterprise; partner with Legal and others to identify regulatory, legislative, and industry specific compliance requirements and define controls that can be used to meet those requirements
- Build a reputation of collaboration with the business to increase information security risk management maturity
- Build a reputation of collaboration with all IT Security and Compliance Towers to ensure that the overall security strategy and annual goals are accomplished
,
Qualifications
- 8-10+ years of information and cybersecurity related experience focused on security strategy, governance, and information security risk management
- Experience setting information security strategy and developing security policies and governance requirements
- Demonstrated experience engaging senior leadership across a global organization to communicate and facilitate business-oriented risk management goal setting and decision making
- Demonstrated experience with information risk management frameworks, including practical approaches to tailoring framework implementations to meet business needs. This includes leading risk assessments on critical assets, communicating risk in business terms, identifying solutions, gaining business buy-in on solution deployments, overseeing their implementation and measuring outcomes effectiveness.
- Demonstrable knowledge of applicable laws and regulations including Sarbanes-Oxley (SOX), GDPR, FDA Post-Market Guidelines, and GxP quality regulations and guidelines
- Demonstrable knowledge of Information Security frameworks, including but not limited to: the IT Infrastructure Library ( ITIL ) and Control Objectives for Information and Related Technology ( COBIT ), ISO 27001, NIST Cyber Security Framework etc.
- Ability to motivate and drive teams to understand requirements
- Adaptability and flexibility to work on a variety of assignments as defined by current priorities
- Proven ability to work effectively in a global enterprise where cross-functional input to decision making is prevalent
- Proven ability to lead projects and initiatives within schedule and budget
- Possession of industry certifications highly preferred including, but not limited to, Certified Information Systems Security Professional ( CISSP ), Certified Information Systems Auditor ( CISA ), Certified Information Security Manager ( CISM ), Information Systems Security Management Professional ( ISSMP ), and Systems Security Certified Practitioner ( SCCP )
Employement Category:
Employement Type: Full timeIndustry: ManufacturingRole Category: IT Operations / EDP / MISFunctional Area: Not ApplicableRole/Responsibilies: Tech Lead, IT SecurityContact Details:
Company Name: BaxterLocation(s): Bengaluru+ View Contact
Keyskills: expression framework baxter iso gdc career cobit adaptability proces
Fraud Alert to job seekers!
₹ Not Disclosed
Similar positions
Baxter
Baxter International Inc. provides a broad portfolio of essential renal and hospital products, including home, acute and in-center dialysis; sterile IV solutions; infusion systems and devices; parenteral nutrition; surgery products and anesthetics; and pharmacy automation, software and services. T...
Job Listings
We are in open beta version of website, please let us know if any issues, at: info(at)indigojobs.in