Cyber Security Risk Manager

hace 2 días

Barcelona, España Launch Global A tiempo completo

**Cyber Security Risk Manager - Contract 6 Months (with potential to extend to 2 years) - Barcelona**

**Why this role might be of interest**

The role has come about because the company, a highly successful and rapidly expanding international pharmaceutical business, is putting in place a brand new internal team to manage cyber security threats.

Because of this whoever takes on this role will work with a lot of autonomy, and have a lot of influence on how cybersecurity operations are developed. It's a high profile role where you will be able to make a real difference in how this company manages and develops it's internet security strategy.

Whilst you'll be part of the initial start up team, there are plans to grow it further, so there is the potential for career progression.

**Working practice**

**95% of your work will be done remotely, with occasional meetings in Barcelona, so if you live in another part of Spain and can travel to Barcelona on an occasional basis, then this role may also suit you.**

We are actually looking to fill two roles:
**Governance and Risk Management Expert**:Strong background in governance and risk management.Experienced in writing and designing policies and procedures.Has implemented GRC systems.

**Security Risk Assessment Specialist**:Proficient in conducting Security Business Impact Assessments, Threat and Vulnerability Assessments, and security controls assessments.Capable of assisting with policy and procedure design, with a focus on conducting assessments post-approval of Security BIA and Risk Management SOPs.

Interested in finding out more?

Full spec below:
The Role

We’re looking for a contractor to join our Cyber Security Team as an Information Security Risk Manager. You will be responsible for assessing, reporting and managing information security risks identified in the copmpany's systems and data, business processes and third party service providers.

You will work closely with IT colleagues, business stakeholders based at multiple locations in Europe, USA and Japan. The minimum duration of the contract is six months, with potential for extension.

We Need a “Pragmatic” and “Driven By Results” Information Security Risk Manager who can:

- Support the design and improvement of the information security framework (ISF): policies, controls, procedures using the NIST Cyber Security Framework; including third party risk management.
- Assess new and existing systems, data flows, business processes, and third party providers engagements and services to implement and verify compliance to the ISF reporting identified risks and issues to systems, processes and third party providers owners.
- Perform information security risk assessments such as but not limited to: security business impact analysis (BIA) and business dependency analysis; security controls plans; controls maturity assessments; third party provider risk profiling, risk assessments and audits.
- Maintains the information security risks and issues registers, deliver high quality reports and run information security committees meetings with business and IT management to manage risks.
- Support the design and improvement of the third party informatin risk management policies, controls and procedures. Assist or lead assessment of information security risks arising from engagement with third party providers and drive remediation efforts.
- Drive the design and implementation of a GRC platform including functional requirements, reviewing process designs, rolling out the new processes to the business and IT teams. Also, support in the administration and maintenance of the GRC tool.
- Design, improve and periodically report security key risk indicators and metrics to IT and business management to support continuous improvements and increase security maturity in our business processes.
- Designs, and delivers the security education training awareness program (SETA) across all business functions at the company. Manage external resources supporting the security awareness activities.

**What we are looking for in terms of experience**
- Desirable: Experience in implementing controls and managing compliance risks in regards to GXP regulated systems, data protection regulations such as EU and UK GDPR, CCPA, and cyber security regulations such as the EU NIS2, and the USA SEC Disclosure Requirements.

The Education, Certifications and Skill You Should Have:

- Significant of professional experience in information technology, ideally at least 3 years as an information security risk manager, preferably in a pharmaceutical, biotechnology or in other manufacturing organizations.
- Bachelor’s or Master’s degree in information security, or in Information Technology.
- Relevant information security professional certifications e.g. CISSP, CISM, CRISC, CISA, GSEC-GIAC, ISO 27001 auditor / practitioner.
- Desirable: Training and or certifications in GRC platforms such as ServiceNow GRC, Archer, Metricstream; and the NIST

  • Cyber Security Risk Manager

    hace 3 semanas

    Barcelona, España Launch Global A tiempo completo

    **Cyber Security Risk Manager - Contract 6 Months (with potential to extend to 2 years) - Barcelona** **Why this role might be of interest** The role has come about because the company, a highly successful and rapidly expanding international pharmaceutical business, is putting in place a brand new internal team to manage cyber security threats. Because of...

  • Cyber Security Risk Manager

    hace 2 semanas

    Barcelona, Barcelona, España Launch Global A tiempo completo

    Cyber Security Risk Manager - Contract 6 Months (with potential to extend to 2 years) - BarcelonaWhy this role might be of interestThe role has come about because the company, a highly successful and rapidly expanding international pharmaceutical business, is putting in place a brand new internal team to manage cyber security threats.Because of this whoever...

  • Cyber Security Risk Manager

    hace 2 semanas

    Barcelona, Barcelona, España Launch Global A tiempo completo

    Cyber Security Risk Manager - Contract 6 Months (with potential to extend to 2 years) - BarcelonaWhy this role might be of interestThe role has come about because the company, a highly successful and rapidly expanding international pharmaceutical business, is putting in place a brand new internal team to manage cyber security threats.Because of this whoever...

  • Director of Cyber Security Governance, Risk, and

    hace 4 semanas

    Barcelona, España AstraZeneca A tiempo completo

    Are you ready to be part of the future of healthcare? Can you think big, be bold, and harness the power of digital and AI to tackle longstanding life sciences challenges? Then Evinova, a new health tech business part of the AstraZeneca Group might be for you! Transform billions of patients’ lives through technology, data, and innovative ways of working....

  • Director of Cyber Security Governance, Risk, and

    hace 2 semanas

    Barcelona, Barcelona, España AstraZeneca A tiempo completo

    Are you ready to be part of the future of healthcare? Can you think big, be bold, and harness the power of digital and AI to tackle longstanding life sciences challenges? Then Evinova, a new health tech business part of the AstraZeneca Group might be for youTransform billions of patients' lives through technology, data, and innovative ways of working. You're...

  • Information Security Risk Manager

    hace 1 semana

    Barcelona, España Yolk Recruitment Ltd A tiempo completo

    Conexus has partnered with a Global Pharmaceutical Company to source an Information Security Risk Manager who will be responsible for assessing, reporting, and managing information security risks identified in our systems and data, business processes, and third-party service providers. You will work closely with IT colleagues and business stakeholders based...

  • Information Security Risk Manager

    hace 1 semana

    Barcelona, España Conexus A tiempo completo

    Conexus has partnered with a Global Pharmaceutical Company to source an Information Security Risk Manager who will be responsible for assessing, reporting, and managing information security risks identified in our systems and data, business processes, and third-party service providers. You will work closely with IT colleagues and business stakeholders based...

  • Cyber Security Management Analyst

    hace 3 semanas

    Barcelona, España Page Personnel España A tiempo completo

    Support in maintaining security certifications. - Manage information security risks in a constant changing environment. - Work with and support our Global Security Operations Centre. - Review and assess IT and security controls. - Perform third-party risk assessments. - Develop, review and implement security policies and procedures. - Work with external and...

  • Information Security Risk Manager

    hace 1 semana

    Barcelona, España Conexus A tiempo completo

    .Conexus has partnered with a Global Pharmaceutical Company to source an Information Security Risk Manager who will be responsible for assessing, reporting, and managing information security risks identified in our systems and data, business processes, and third-party service providers. You will work closely with IT colleagues and business stakeholders based...

  • Cybersecurity Risk Manager

    hace 1 semana

    Barcelona, España The Leadership Collective A tiempo completo

    .Job Title: Information Security Risk ManagerCirca €6K - €8K per monthLocation: Barcelona / Hybrid | Contract: 6 Months (with potential to extend to 2 years)About The Company: The company are a highly successful and rapidly expanding international pharmaceutical company establishing a new internal team to manage cyber security threats. Join them in a...

  • Cyber Security Lead

    hace 2 semanas

    Barcelona, España Arxada A tiempo completo

    Arxada is a global specialty chemicals business that’s committed to solving the world’s toughest preservation challenges through better science. With a proud history of innovation dating back more than a century, we aim to help our customers develop more sustainable solutions that protect and maintain the health and wellbeing of people and extend the...

  • Cyber Risk Analyst

    hace 3 semanas

    Barcelona, España Amcor A tiempo completo

    Cyber Risk Analyst **Location**:Bristol, GB - Barcelona, ES - Madrid, ES - Seville, ES - Horsens, DK - Ledbury, GB - Liverpool, GB - Birmingham, GB - Lisbon, PT - Lodz, PL - Valencia, ES**Function**:Information Technology**Part-time or Full-time**:Full-Time**Job Type**:Employee**Workplace type**:Remote**Join Amcor and you can be part of the team that makes...

  • Cyber Security Governance Manager

    hace 2 días

    Barcelona, España Galderma Pharma S.A A tiempo completo

    .Cyber Security Governance Manager page is loaded Cyber Security Governance Manager Apply locations Barcelona time type Full time posted on Posted 2 Days Ago job requisition id JR008938 With a unique legacy in dermatology as well as decades of cutting-edge innovation, Galderma is the pure-play dermatology category leader, present in approximately 90...

  • Cyber Security Governance Manager

    hace 1 semana

    Barcelona, España Galderma Pharma S.A A tiempo completo

    .Cyber Security Governance Manager page is loaded Cyber Security Governance Manager Apply locations Barcelona time type Full time posted on Posted 2 Days Ago job requisition id JR008938 With a unique legacy in dermatology as well as decades of cutting-edge innovation, Galderma is the pure-play dermatology category leader, present in approximately 90...

  • Security Risk Management Specialist

    hace 1 semana

    Barcelona, España Canonical A tiempo completo

    .In security risk management we're looking to harness the power of industry best practice combined with driving new innovation on how we do security risk assessments and modelling. Our security risk management team is the primary owner of the strategy and practices of how we identify, track and reduce our security risk across everything we do.To support this...

  • Cybersecurity Risk Manager

    hace 1 semana

    Barcelona, España The Leadership Collective A tiempo completo

    Job Title: Information Security Risk ManagerCirca €6K - €8K per monthLocation: Barcelona / Hybrid | Contract: 6 Months (with potential to extend to 2 years)About The Company: The company are a highly successful and rapidly expanding international pharmaceutical company establishing a new internal team to manage cyber security threats. Join them in a...

  • Cyber Security Analyst

    hace 3 semanas

    Barcelona, España isolutions A tiempo completo

    **Is Cyber Security your passion? **More and more companies are using Microsoft cloud technologies to increase agility and enable innovation. Deploying Microsoft 365, and Azure services is often the first step into the cloud. Modern ways of working and cloud services present new challenges for IT security. In our Cloud Security Practice, we help...

  • Cyber Security Architect |

    hace 1 semana

    Barcelona, España Airbus A tiempo completo

    .Job Description:SUMMARYAre you a Cyber Security Architect ready to take on new and exciting challenges?... Do you dare to accept the challenge of working for a worldwide aerospace leader company?...If you are a highly motivated Engineer, working in Cyber Security field that counts with real work experience designing Security Architectures, strong...

  • Cyber Risk Analyst

    hace 2 semanas

    Barcelona, Barcelona, España Amcor A tiempo completo

    Cyber Risk AnalystLocation:Bristol, GB Barcelona, ES Madrid, ES Seville, ES Horsens, DK Ledbury, GB Liverpool, GB Birmingham, GB Lisbon, PT Lodz, PL Valencia, ESFunction:Information TechnologyParttime or Fulltime:Full-TimeJob Type:EmployeeWorkplace type:RemoteJoin Amcor and you can be part of the team that makes the packaging of the future better for people...

  • Director of Cyber Security Architecture

    hace 4 semanas

    Barcelona, España AstraZeneca A tiempo completo

    Are you ready to be part of the future of healthcare? Can you think big, be bold, and harness the power of digital and AI to tackle longstanding life sciences challenges? Then Evinova, a new health tech business part of the AstraZeneca Group might be for you! Transform billions of patients’ lives through technology, data, and innovative ways of working....