SOX Compliance/Security Consultant (REMOTE)
Posted 2 weeks ago by 1751030175
Negotiable
Outside
Remote
USA
Summary: The SOX Compliance/Security Consultant role involves ensuring the security of software applications within the Information Security and Risk Management department. The position requires a minimum of 5 years of experience in security and controls, particularly in the pharmaceutical industry, and emphasizes SOX compliance. The consultant will conduct cybersecurity risk assessments and support the implementation of security controls across global projects. The role can be performed remotely, although a hybrid option in Raritan, NJ is preferred by the client.
Key Responsibilities:
- Orchestrate and deliver cybersecurity risk assessments for applications and associated technologies.
- Support the design and implementation of cybersecurity controls and assurance testing.
- Identify application-related risks prior to go-live and ensure mitigation plans are in place.
- Promote risk management activities in line with regulations and internal policies.
- Facilitate education and training on cybersecurity and internal control procedures.
- Provide periodic work status updates summarizing accomplishments, blockers, and risks.
- Build relationships with global stakeholders and consult on security controls implementation.
- Make recommendations for application security, including change and incident management.
- Consult with stakeholders on data classification, privacy, and protection controls.
Key Skills:
- Minimum 5 years of experience in security and controls.
- Experience with SOX compliance and IT General Controls.
- Strong technical skills and troubleshooting abilities.
- Excellent documentation, communication, and organizational skills.
- Ability to manage complexity and prioritize multiple tasks.
- Bachelor's Degree in Information Technology, Computer Science, or related field.
- Pharmaceutical industry-related security certifications preferred.
- Strong verbal skills and experience consulting stakeholders.
Salary (Rate): undetermined
City: undetermined
Country: USA
Working Arrangements: remote
IR35 Status: outside IR35
Seniority Level: undetermined
Industry: IT
SOX Finance Experience is a must.
Please note that this is a 6-month long term contract position.
Position can be remote but Client refer somebody can work hybrid in Raritan, NJ.
EXPERIENCE/COMPETENCIES
Minimum 5 years experience working with security and controls, consulting stakeholders throughout the application lifecycle development process
Experienced in identifying and articulating Controls/gaps around application security issues
Working knowledge of pharmaceutical business processes
Experienced in SOX compliance requirement/ IT General Controls
Experience in supporting internal and external Audits.
Self-starter and proficient multitasker with excellent documentation, communication, and organizational skills
Strong technical skills, including troubleshooting acumen for complex issues in need of problem solving.
Strong teamwork and communication/information sharing skills.
Exercise judgment and influence on key processes and technical decisions (e.g. - policy, standards, technical solutions).
Good organization, planning, and time management skills.
Demonstrated ability to manage complexity and handle/prioritize multiple tasks.
Process and detail oriented.
Excellent written and verbal skills (required for high-volume communications with company employees involved in data preservation tasks.)
Education
Bachelor s Degree in Information Technology, Computer Science, or a related field
Pharmaceutical industry related Security Certifications preferred.
Top Three Skills: degree in Computer science/Information tech, verbal skills, consulting stakeholders
PURPOSE OF POSITION
In the Assessment CoE Analyst role you will work within the Information Security and Risk Management (ISRM) department, joining the team responsible for ensuring the security of software applications. You will be responsible for security & controls throughout global projects related to R&D, Supply Chain, and Medical Technology applications including both 3rd party and internally developed applications.
RESPONSIBILITIES/PRINCIPAL DUTIES
Primary responsibilities include the following:
Orchestrate and deliver cybersecurity risk assessments Applications, and the technologies that run them while maintaining awareness of the changing threat landscape.
Support the design of cybersecurity controls, ensure proper design implementation and assurance testing.
Responsible for identifying risks related to the application prior to go-live and ensuring that appropriate mitigation/remediation plans are in place.
Understand and promote risk management activities associated with external regulations and internal policies such as Internal Asset Protection Policies (IAPP), GxP, SOX, and GDPR
Facilitate education and training to the program team on cybersecurity and internal control procedures and controls.
Provide a periodic work status update in the form of a summary slide of accomplishments, blockers, risks.
Build relationships with global stakeholders and provide consulting related to security controls implementation throughout project phases
Make recommendations for application security including change, incident management, process enhancements, access management, and change management
Consult with stakeholders about controls related to data classification and privacy, including data encryption and protection
Applicants must provide their phone number. Reference job number A4824.