Cybersecurity Architect - Mergers & Acquisitions

Description

You will join the security architecture group in the information security and risk management function. The group advises the business development team on deals, from research partnerships to full acquisitions, with the aim of lowering risk and reducing technical friction.

You will be the main link between security, technical and business staff. You will work at both day-to-day and strategic levels on individual deals and research projects.

You will work with research, business intelligence, technical and other security colleagues to build security products and services, help shape the program, and make sure active acquisitions get the right security support at the right time.

The role sits in security architecture, with a dotted-line relationship to the cybersecurity threat intelligence team.

The company develops medicines in immunology, oncology and neuroscience, and also offers aesthetics products.

Responsibilities

• Coordinate core security and technology services with infrastructure, technology, security and target company teams during an acquisition or divestiture.
• Work with infrastructure, technology and security teams to create, document and roll out secure design patterns for collaborations with strategic alliance partners.
• Build new security playbooks and services for business alliances and acquisitions, working alongside internal security and technical teams.

Requirements

• Required:
• A bachelor's degree plus 7 years of experience, a master's degree plus 6 years, or a PhD plus 2 years.
• Hands-on experience in a security architecture discipline such as cloud security, AppSec, network security, identity or operational technology, with solutions you have designed and successfully delivered that you can explain.
• Direct experience designing or delivering solutions for mergers, acquisitions, divestitures or multi-company collaborations.
• Working knowledge of major cloud platforms and their security services (AWS, GCP, Azure) and collaboration platforms (M365, Slack).
• Working knowledge of Active Directory and its security concepts, such as domains, forests and trusts.
• A solid understanding of industry security standards such as NIST 800 and ISO 27001.
• Preferred:
• Five years in an information security role, ideally as a security architect or security engineer.
• Experience with a range of security tools and capabilities, ideally with some hands-on operational work in self-hosted and cloud environments.
• GCFE, GCFA, GDSA, GCTI, GCIA, GCDA and GEIR certifications are strongly preferred.
• Other related technical or industry certifications, such as SANS or AWS.

Conditions

Remote work is possible from anywhere in the U.S.

Applications are accepted only from the US and Puerto Rico.

Where pay disclosure law applies, the company states in good faith the base pay range it expects to pay for this role at posting, based on the job grade. Individual pay within that range depends on factors including geographic location, and actual pay may fall above or below it. The range may change.

Bonuses, incentives and other compensation are at the company's sole discretion and are not considered wages or compensation until earned, vested and determinable.

The company is an equal opportunity employer that welcomes veterans and people with disabilities.

Benefits

• Paid time off covering vacation, holidays and sick leave.
• Medical, dental and vision insurance, and a 401(k), for eligible employees.
• Eligibility for the company's long-term incentive programs.