IT Security Manager

A biotech company in New Jersey is seeking a new IT Security Manager to join their team in Middlesex County. This hybrid role will focus on third-party cyber risk management, security assurance, and audit-related activities across a global environment.

About the Opportunity:

• 
  

  Shift: Day

  
  


• 
  

  Schedule: Monday to Friday

  
  


• 
  

  Hours: Standard business

  
  


• 
  

  Setting: Hybrid (at least 2 days a week onsite)

  
  

Responsibilities:

• 
  

  Lead third-party cyber risk management activities, including security assessments, controls, and risk tracking

  
  


• 
  

  Develop and maintain security standards, documentation, metrics, and reporting for vendor-related risk

  
  


• 
  

  Support audit planning and execution, including assurance reviews and audit calendars

  
  


• 
  

  Collaborate with Procurement, Legal, Privacy, Compliance, and QA partners to align security requirements

  
  


• 
  

  Monitor supplier risk trends and contribute to security improvement roadmaps and remediation efforts

  
  

Qualifications:

• 
  

  At least 5 years of experience in Third-Party Cyber Risk Management, Information Security, or Risk Management

  
  


• 
  
  
  

  Bachelor's degree in Computer Science, MIS, or a related field, or an equivalent combination of relevant experience and training

  
  
  
  


• 
  
  Certified CISA, CRISC, CISM, CISSP, or a relevant certification
  
  


• 
  

  Experience with Security and Risk Management frameworks and regulations, such as ISO, NIST, GDPR, SOX, HIPAA, FISMA, and GxP

  
  


• 
  

  Experience with GRC tools, such as ServiceNow, Galvanize, Vanta, MetricStream, Archer, or WolfPAC

  
  

Desired Skills:

• 
  

  Experience in a pharmaceutical, biotech, or healthcare environment

  
  


• 
  

  Strong understanding of vendor management processes and assurance frameworks, including SOC 1 and SOC 2 audits

  
  


• 
  

  Experience working in multinational organizations and global virtual teams

  
  


• 
  

  Strong business acumen and stakeholder communication skills

  
  


• 
  

  Experience developing audit roadmaps, dashboards, and key risk indicators