Application Cybersecurity Associate (HYBRID- No H1B/C2C)

Overview

Hybrid
Depends on Experience
Contract - W2
Contract - 1 Year(s)

Skills

Cybersecurity
application security
SOX control
IAPP
compliance
application assessments
change management control
GXP
data classification
cloud-based software
Salesforce
risk calculators
security consulting
penetration testing
incident trending
static vulnerabilities
dynamic vulnerabilities
TLM/ALM security
privacy compliance
IT compliance
Car-T applications
security metrics
reporting
audit experience.

Job Details

No H1B/C2C

Prefer local candidates.

Please note that this is a 1-year contract position.

Qualifications:
- Role will be Hybrid (3 days in office, 2 days remote)
- Must have Bachelor's degree in cybersecurity

- Minimum of 5 years of experience with Software required: Cloud-based software (ex - Salesforce)
- Working knowledge and experience with Cybersecurity and Application Security
- SOX control experience
- IAPP experience
- Compliance knowledge
- Must be able to perform Application Assessments on every control
- Change Management Control experience
- GXP experience
- Must know how data is classified
- Must have excellent communication skills
- Must be a proactive worker (a go-getter)

Top Three Skills:

  • Information Security Compliance experience
  • Sox/Audit Experience in Pharmaceutical and Cloud-based software controls OT
  • Make or Application Security Assessment experience

Description:
Provide security consulting and assurance for assigned platforms, including:

o Performing risk calculators to identify high risk applications/projects; for those identified, performing application security questionnaires/assessments, identifying security gaps and appropriate remediation actions
o Support Pen Test executions for Key Advanced Therapies applications, identifying remediation plans for issues identified;
o Performing Incident trending to ensure security root causes are identified and remediated
o Evaluating static & dynamic vulnerabilities to identify TLM/ALM & other security issues along with the appropriate remediation actions.
Large experience in SOX, IAPP, GxP, Privacy compliance requirements
Provide local oversite for interns, employees/Contractors under my responsibility
Support Key Advanced Therapies projects:
o Providing a central point for SC security questions or queries on project support, connecting with the appropriate ISRM team member to ensure complete and accurate responses and/or appropriate involvement
o Navigating between all ISRM SC pillars to obtain knowledge regarding security issues
Ensures appropriate controls are implemented for Car-T Applications and coordinates alignment with Internal Audit and IT Compliance
Provide metrics and reports on a weekly basis tracking the entire portfolio, application assessment status, and Risk Acceptance status.

Applicants must provide their phone number. Reference job number A4746.

Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.