Manager, Cybersecurity

IQVIA • Durham, NC

2d

About The Position

As a Member of our Cybersecurity you will find yourself working together with other IQVIA Information Security team members, and liaising regularly with stakeholders at IQVIA, including members of Global Technology Organization, Global and Regional Business Units, Legal, and executive teams. This is an opportunity to join and progress with a forward-thinking department. Principal responsibilities will include: Cooperate with internal and external stakeholders to support global Information Security Incident Response process Lead complex investigations including delivery of summary reports and stakeholder updates Engage with Senior stakeholders to deliver incident summaries and preventive action plans Propose and implement improvements to the landscape of technical security safeguards, including technologies, systems and associated processes and procedures Contribute to development and documentation of operational procedures and metrics in relation to activities carried out by the team Utilize information security technical safeguards and associated procedures, analyzing output and producing relevant management information reports for further improvements in the security safeguards landscape, including vulnerability assessment and threat intelligence Contribute to effectiveness of the Information Security Operations team by providing expert analysis and input to incident identification, response, resolution, and post-incident investigations Operate information security system components including firewalls, endpoint detection and response, intrusion prevention, malware and data leakage prevention, vulnerability management, access control, event monitoring and others

Requirements

• Experience in Cybersecurity, Information Security, Risk Management, IT Controls, Security Operations Center or other related area is mandatory
• Experience in information technology related positions with working knowledge of IT infrastructure, networks, databases, processing systems, web applications, mobile technology, cloud, big data and virtualization
• Working knowledge of cybersecurity principles, algorithms, protocols and technologies supporting encryption, authentication, access control, information systems attack patterns, intrusion detection, and network security
• Working knowledge of IT governance frameworks and standards such as CobiT, ITIL, ISO27001
• Experience in working with automated network and application security vulnerability scanners
• Commitment in delivering significant value to organization as a trusted advisor
• Excellent communication skills, including ability to communicate across countries and cultures, and organization levels including senior executives
• Excellent team player and collaborator
• Attention to detail
• Ability to work under own initiative, and enthusiasm to drive through change and multitask
• Ability to exercise high level of confidentiality when dealing with highly sensitive information
• Experience of estimating and planning work effort including managing risks and issues in relation to delivery of work
• Commitment to ongoing professional development
• Bachelor's degree in computer science, computer engineering, or information technology
• Minimum 4 years of related work experience

Nice To Haves

• Prefer any of the following certificates: CISSP, CEH or GIAC
• An ITIL or project management certificates are not required but beneficial

Responsibilities

• Cooperate with internal and external stakeholders to support global Information Security Incident Response process
• Lead complex investigations including delivery of summary reports and stakeholder updates
• Engage with Senior stakeholders to deliver incident summaries and preventive action plans
• Propose and implement improvements to the landscape of technical security safeguards, including technologies, systems and associated processes and procedures
• Contribute to development and documentation of operational procedures and metrics in relation to activities carried out by the team
• Utilize information security technical safeguards and associated procedures, analyzing output and producing relevant management information reports for further improvements in the security safeguards landscape, including vulnerability assessment and threat intelligence
• Contribute to effectiveness of the Information Security Operations team by providing expert analysis and input to incident identification, response, resolution, and post-incident investigations
• Operate information security system components including firewalls, endpoint detection and response, intrusion prevention, malware and data leakage prevention, vulnerability management, access control, event monitoring and others

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Number of Employees: 5,001-10,000 employees