Manager, Cybersecurity Risk

Otsuka Pharmaceutical Co., Ltd.

75d • $117,027 - $175,030

About The Position

The Cybersecurity risk manager reports to the Business Information Security Officer (BISO) and collaborates with business and IT colleagues to deliver critical capabilities in support of strategic information security goals. This includes operational management of third-party and IT system cybersecurity assurance processes that assess against company standard information security controls. This role will also coordinate the execution of periodic penetration tests and other required cybersecurity assessments, including the end-to-end management of identified issues. The role will interface with stakeholders in privacy, legal, quality, and other compliance functions and requires excellent communication skills and the ability to support multiple efforts across information security disciplines.

Requirements

• 5+ years of experience in information security, including roles in information security assurance or assessment processes.
• Strong understanding of cybersecurity frameworks and best practices.
• Excellent communication and people skills, with the ability to explain complex technical concepts to non-technical stakeholders.
• Experience with cloud security (e.g., AWS, Azure, Google Cloud).
• Demonstrate teamwork and communication skills through knowledge sharing, collaboration, and relationship-building.
• Exhibit the capacity to actively learn and apply specific domain knowledge and best practices.

Nice To Haves

• Certifications such as CISSP, CISM, CISA, or similar are highly desirable.

Responsibilities

• Work with the business and IT to ensure that they assess third parties and IT systems against information security controls.
• Lead the coordination and execution of penetration tests and other cybersecurity assessments.
• Ensure the assignment of identified issues to owners and track through completion.
• Support the BISO in the management of a cybersecurity risk management platform.
• Manage identified issues through cybersecurity risk management processes, including risk analysis and recommendations for remediation or mitigation.
• Establish and manage a complete inventory of business and IT applications and third parties.
• Oversee and support the execution of ongoing governance for inherently high risk third parties.
• Provide periodic status reporting to the BISO and CISO.
• Support the execution of information security assessments as part of the systems development life cycle.
• Manage the process to ensure that the inherent and residual risk levels for business and IT applications are documented.
• Oversee the execution of ongoing assessments for inherently high-risk IT systems.
• Support the planning, scoping and coordination of annual independent penetration tests.
• Analyze findings from penetration tests and ensure the assignment of appropriate remediation actions.

Benefits

• Comprehensive medical, dental, vision, prescription drug coverage.
• Company provided basic life, accidental death & dismemberment, short-term and long-term disability insurance.
• Tuition reimbursement, student loan assistance.
• Generous 401(k) match.
• Flexible time off, paid holidays, and paid leave programs.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: Bachelor's degree
• Number of Employees: 1,001-5,000 employees