IT Security Manager

A biotech company in New Jersey is seeking a new IT Security Manager to join their team in Middlesex County. This hybrid role will focus on third-party cyber risk management, security assurance, and audit-related activities across a global environment.

About the Opportunity:

• Shift: Day

• Schedule: Monday to Friday

• Hours: Standard business

• Setting: Hybrid (at least 2 days a week onsite)

Responsibilities:

• Lead third-party cyber risk management activities, including security assessments, controls, and risk tracking

• Develop and maintain security standards, documentation, metrics, and reporting for vendor-related risk

• Support audit planning and execution, including assurance reviews and audit calendars

• Collaborate with Procurement, Legal, Privacy, Compliance, and QA partners to align security requirements

• Monitor supplier risk trends and contribute to security improvement roadmaps and remediation efforts

Qualifications:

• At least 5 years of experience in Third-Party Cyber Risk Management, Information Security, or Risk Management

• Bachelor's degree in Computer Science, MIS, or a related field, or an equivalent combination of relevant experience and training

• Certified CISA, CRISC, CISM, CISSP, or a relevant certification

• Experience with Security and Risk Management frameworks and regulations, such as ISO, NIST, GDPR, SOX, HIPAA, FISMA, and GxP

• Experience with GRC tools, such as ServiceNow, Galvanize, Vanta, MetricStream, Archer, or WolfPAC

Desired Skills:

• Experience in a pharmaceutical, biotech, or healthcare environment

• Strong understanding of vendor management processes and assurance frameworks, including SOC 1 and SOC 2 audits

• Experience working in multinational organizations and global virtual teams

• Strong business acumen and stakeholder communication skills

• Experience developing audit roadmaps, dashboards, and key risk indicators