Job Description

Job Description

Our company is a leading global biopharmaceutical company. For more than a century, our company has been inventing for life, bringing forward medicines and vaccines for many of the worlds most challenging diseases. Through our prescription medicines, vaccines, biologic therapies and animal health products, we work with customers and operate in more than 140 countries to deliver innovative health solutions. We also demonstrate our commitment to increasing access to health care through far-reaching policies, programs and partnerships.

Today, our company continues to be at the forefront of research to advance the prevention and treatment of diseases that threaten people and communities around the world - including cancer, cardio-metabolic diseases, emerging animal diseases, Alzheimers disease and infectious diseases including HIV and Ebola.

We are looking for an Associate Director, Compliance & Risk Management for our Branchburg, NJ to determine the cyber risk posed to company Technology Assets, Business Process and Third parties, including geo-political concerns, cyber threats, vulnerabilities, adversaries and their techniques, tactics and procedures. Responsible for assessing and mitigating risk based on the confidentiality, integrity and availability of our company information and the technology assets that store this information. Duties include the following:

* Serve as leading analyst and expert in medium and large-scale projects and programs in risk management to make our company more resilient against potentially adverse cyber events, while keeping the business agile and the risk management process efficient. Utilize knowledge and expertise in industry standards such as NIST (National Institute of Standards and technology), The MITRE ATT&CK frame work and the ISO 27000 family of standards. Leverage expertise in Networks, Cloud Security, Operation system security, database and application security to assess and mitigate risk.

* Proactively identify and assess cyber security risks to innovative technologies and to day-to-day operations using intel from various security tools including Vulnerability Scanner, SIEM, Firewalls, IDS, and custom-built Adaptive Risk Management system (ARM).

* Work with a global team of risk analysts to identify and assess cyber security risks to company Technology Assets, Business Process and Third parties

* Maintain extreme customer focus and mature the Risk Management process using innovative approaches and metrics, such as Archer.

**Position has the ability to telecommute from anywhere in the United States within the following framework: must work onsite at Branchburg, NJ office location at least 50% of the time.**

Qualifications

* MS in Computer Information & System Security, Computer Science, or closely related field

* 10 years of computer science experience

* Experience must include 4 years in Information Risk & Security, and experience with the following: Network Security, Application Security, Database Security and Cloud Security, End Point Security and Identity and Access management; security Technologies such as PKI, Firewalls, Penetration testing software and use, Privileged access management and Data Encryption; using third-party tools and cyber intelligence gathering source; conducting cyber risk assessments for applications, business process, innovative technologies and third parties utilizing risk-based approaches including control assessments, Risk Advisory Boards, Threat Models and Kill chains; mitigating risk through the deployment of technology controls as well as procedural controls; cyber Incident, Threat and Vulnerability Management; security Incident Response; MITRE ATT&CK frame work; NIST Cyber Framework; ISO 2700 family of standards; systems development methodologies, including Agile and Scrum; assessing cyber risk across networks, operating systems, applications, databases, and other information system technologies; working with Governance Risk and Compliance platforms and solutions, including Archer, and hands-on experience completing Information Risk/Security Assessments; and leadership experience across globally located teams in a matrix environment. Must have Advanced Security Certifications- CISSP, CEH.

* Will also accept a BS and 12 years of stated computer science experience.

* Position has the ability to telecommute from anywhere in the United States within the following framework: must work onsite at Branchburg, NJ office location at least 50% of the time.

Our employees are the key to our companys success. We demonstrate our commitment to our employees by offering a competitive and valuable rewards program. Our Companys benefits are designed to support the wide range of goals, needs and lifestyles of our employees, and many of the people that matter the most in their lives.

Who we are

We are known as Merck & Co., Inc., Kenilworth, New Jersey, USA in the United States and Canada and MSD everywhere else. For more than a century, we have been inventing for life, bringing forward medicines and vaccines for many of the world's most challenging diseases. Today, our company continues to be at the forefront of research to deliver innovative health solutions and advance the prevention and treatment of diseases that threaten people and animals around the world.

What we look for

In a world of rapid innovation, we seek brave Inventors who want to make an Impact in all aspects of our business, enabling breakthroughs that will affect generations to come. We encourage you to bring your disruptive thinking, collaborative spirit and diverse perspective to our organization. Together we will continue Inventing For Life, Impacting Lives while Inspiring Your Career Growth.

Invent. Impact. Inspire.

NOTICE FOR INTERNAL APPLICANTS

In accordance with Managers' Policy - Job Posting and Employee Placement, all employees subject to this policy are required to have a minimum of twelve (12) months of service in current position prior to applying for open positions.

If you have been offered a separation benefits package, but have not yet reached your separation date and are offered a position within the salary and geographical parameters as set forth in the Summary Plan Description (SPD) of your separation package, then you are no longer eligible for your separation benefits package. To discuss in more detail, please contact your HRBP or Talent Acquisition Advisor.

We are proud to be a company that embraces the value of bringing diverse, talented, and committed people together. The fastest way to breakthrough innovation is when diverse ideas come together in an inclusive environment. We encourage our colleagues to respectfully challenge one anothers thinking and approach problems collectively. We are an equal opportunity employer, committed to fostering an inclusive and diverse workplace.

Residents of Colorado

Click here to request this roles pay range.

US and Puerto Rico Residents Only:

Our company is committed to inclusion, ensuring that candidates can engage in a hiring process that exhibits their true capabilities. Please click here if you need an accommodation during the application or hiring process.
For more information about personal rights under Equal Employment Opportunity, visit:

EEOC Poster

EEOC GINA Supplement

OFCCP EEO Supplement

We are proud to be a company that embraces the value of bringing diverse, talented, and committed people together. The fastest way to breakthrough innovation is when diverse ideas come together in an inclusive environment. We encourage our colleagues to respectfully challenge one anothers thinking and approach problems collectively. We are an equal opportunity employer, committed to fostering an inclusive and diverse workplace.

Search Firm Representatives Please Read Carefully
Merck & Co., Inc., Kenilworth, NJ, USA, also known as Merck Sharp & Dohme Corp., Kenilworth, NJ, USA, does not accept unsolicited assistance from search firms for employment opportunities. All CVs / resumes submitted by search firms to any employee at our company without a valid written search agreement in place for this position will be deemed the sole property of our company. No fee will be paid in the event a candidate is hired by our company as a result of an agency referral where no pre-existing agreement is in place. Where agency agreements are in place, introductions are position specific. Please, no phone calls or emails.

Employee Status:

Regular

Relocation:

No relocation

VISA Sponsorship:

No

Travel Requirements:

Flexible Work Arrangements:

Remote Work, Telecommuting

Shift:

Valid Driving License:

Hazardous Material(s):

Number of Openings:

2
Requisition ID:R108055