Information Security Certification Program Manager, Sr Staff

Illumina • San Diego, CA

10d • Hybrid

About The Position

What if the work you did every day could impact the lives of people you know? Or all of humanity? At Illumina, we are expanding access to genomic technology to realize health equity for billions of people around the world. Our efforts enable life-changing discoveries that are transforming human health through the early detection and diagnosis of diseases and new treatment options for patients. Working at Illumina means being part of something bigger than yourself. Every person, in every role, has the opportunity to make a difference. Surrounded by extraordinary people, inspiring leaders, and world changing projects, you will do more and become more than you ever thought possible. Location San Diego, CA Position Summary The Sr. Staff Information Security Certifications Program Manager, will mature and maintain a strong security certifications program. With an immediate goal to maintain multiple certifications for Illumina’s cloud-based analytics products, the Sr. Staff will bring the necessary subject matter expertise in the security certifications space and advance the program to meet future business needs. Operating within the Security GRC team, engages with Illumina’s commercial leaders and develops necessary plans and proposals for leadership review to meet customer needs within the space of security certifications. The position requires ability to operate with limited supervision, with high customer satisfaction, efficiency, and accountability towards the success of the program. This position interacts with all tiers of staff and management and must possess quality, regulatory and IT knowledge

Requirements

• Strong oral and written skills to persuade, direct and advise stakeholders on security certification processes.
• Strong organizational skills to maintain and manage high impact security certification programs such as ISO 27001, 27701, 27017 27018, SOC-2, C5 and TxRamp
• Extensive experience in taking through a complete lifecycle of security certification process and ongoing maintenance
• Experience working with AuditBoard or similar industry standard GRC tools and managing audit evidence.
• Multiple years of experience in engaging with external certification firms and directly managing the certification process
• Audit awareness and ability to represent internal process and controls to support self-audits and external audits
• Strong understanding of security best practices and ability to interpret applicability of control requirements.
• Extensive experience in building audience-based presentations, status updates, budget proposals and compliance score cards.
• Experience and leadership in fast-paced project implementations.
• Excellent customer service and communication skills.
• Understanding of latest and next generation security tools along with common Cloud IT infrastructure and applications, e.g., virtualization, directory services, storage, DBMS.
• Typically requires a minimum of 12 years of related experience with a Bachelor’s degree in Technology, Science, Business or related field; or 8 years and a Master’s degree; or a PhD with 5 years experience; or equivalent experience.
• Must have served in a role that had responsibility and accountability for maintaining Information Security Certifications, preferably SOC2, ISO, TxRamp/FedRamp/StateRamp.

Nice To Haves

• Experience in Medical Devices, Pharmaceutical and/or Biotech Industries desired.

Responsibilities

• Drives Information Security Certification Program to maintain ISO, SOC2, HIPAA and C5 certifications for cloud-based Illumina Analytics products
• Maintains security controls compliance within AuditBoard tool to ensure process and policy adherence
• Develops future state strategy to meet changing business needs around Information Security Certification program
• Defines, implements, and maintains annual recertification process for multiple security certifications
• Oversees the security certification governance processes including audit readiness, continuous monitoring, periodic review and management reporting
• Liaises with security engineering, operations and infrastructure teams to remediate control gaps.
• Communicates the status and accomplishments of overall certification program to executive leaders, peers in the IT organization, customers, and stakeholders.
• Responsible for guiding the IT Organization on security certification controls, audit readiness and training needs
• Serves as certification program SME and represents organizational controls during internal and external audits.
• Ability to review customer attestation request or contracts for alignment with Illumina’s security posture
• Aligns and contributes towards maturing Illumina’s security certification program
• Advises IT, Business teams and internal GIS customers on security certifications scope, controls management and monitoring approach.
• Drive collaboration across teams, developing relationships with key leaders inside and outside of information Security to ensure ongoing success of Information Security Certifications Program.

Benefits

• We offer a wide range of benefits as innovative as our work, including access to genomics sequencing, family planning, health/dental/vision, retirement benefits, and paid time off.
• We are a company deeply rooted in belonging, promoting an inclusive environment where employees feel valued and empowered to contribute to our mission.
• Built on a strong foundation, Illumina has always prioritized openness, collaboration, and seeking alternative perspectives to propel innovation in genomics.
• We are proud to confirm a zero-net gap in pay, regardless of gender, ethnicity, or race.
• We also have several Employee Resource Groups (ERG) that deliver career development experiences, increase cultural awareness, and offer opportunities to engage in social responsibility.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Number of Employees: 5,001-10,000 employees