Senior Manager Information Security

AmerisourceBergen; London; On-site; GBP 70,000 - 100,000; Full time

Job summary

Cencora, part of AmerisourceBergen, seeks an Information Security Manager to lead security initiatives. This role encompasses governance, policy development, and team management in a dynamic environment. Ideal candidates will have substantial experience in security management, alongside relevant certifications and a strong educational background.

Qualifications

• Over 7 years of relevant experience including 3+ years in a managerial role.
• Master's degree or equivalent experience required.
• Preferred certifications include CISA, CISSP, and PMP.

Responsibilities

• Manage a team to support application security programs.
• Develop and implement enterprise-wide security policies.
• Lead strategy and engineering for security solutions.

Skills

Coaching and Mentoring

Critical Thinking

People Management

Planning

Presentation Skills

Education

Master’s Degree in Business Administration

Master’s Degree in Computer Science

Master’s Degree in Information Technology

Tools

SIEM

EDR

Email Security Gateway

Vulnerability Testing Tools

Job description

Our team members are at the heart of everything we do. At Cencora, we are united in our responsibility to create healthier futures, and every person here is essential to us being able to deliver on that purpose. If you want to make a difference at the center of health, come join our innovative company and help us improve the lives of people and animals everywhere. Apply today!

Job Details

Responsibilities:

• Manage a team of individuals and vendors to support application security programs, including remediation strategies and efforts to protect infrastructure and third-party application vulnerabilities.
• Oversee planning, execution, and management of security engagements related to your functional area of responsibility.
• Develop key reports on vulnerabilities to stakeholders and serve as a subject matter expert (SME) for ISO programs.
• Advise on strategic and tactical security initiatives, providing support and collaboration to meet organizational objectives.
• Develop, refine, and implement enterprise-wide security policies, procedures, and standards across multiple platforms and applications to meet compliance requirements.
• Support documentation and tracking of policies, procedures, standards, and system configurations; recommend and implement necessary changes.
• Participate in setting goals/KPIs, budget creation, and performance management for the Information Security Strategy team.
• Lead the security team in validating security incidents, gathering evidence, and identifying root causes for application and network-related issues, advising on remediation.
• Review internal processes for potential improvements and automation opportunities.
• Provide technical and management leadership on assignments, acting as a SME, and support training efforts.
• Ensure alignment with other teams and departments, including project design, implementation, and research on new security processes.
• Coordinate and report on application development, infrastructure implementation, and maintenance of security initiatives.
• Lead the strategy, design, engineering, and implementation of security solutions and frameworks.
• Provide vision and leadership for the organization’s cybersecurity culture and processes.
• Develop, review, and maintain security documentation; collaborate with research and enterprise security teams.
• Help improve information security programs to keep pace with evolving security requirements.
• Lead corporate business resiliency efforts, including continuity planning, impact management, and disaster recovery.
• Lead in designing and implementing security strategies and solutions.
• Manage a high-performing team responsible for security solutions and support the IT risk & compliance team in related activities.

Educational Qualifications:

• Master’s Degree in Business Administration, Computer Science, Information Technology, or related discipline, or equivalent experience.

Preferred Certifications:

• CISA, CISSP, CISM, ITIL, OSCP, PMP

Work Experience:

• 7+ years of relevant experience, including 3+ years in a managerial role, preferably in information security.

Skills & Knowledge:

Behavioral Skills:

• Coaching, Mentoring, Conflict Resolution, Critical Thinking, Multitasking, People Management, Planning, Presentation Skills

Technical Skills:

• IT Risk Management, IT Controls, Cyber Attack Mitigation, Security Standards (ISO, COBIT, NIST, PCI), Enterprise Architecture, Network Security, Threat Modelling

Tools Knowledge:

• Microsoft Office, Security Tools (SIEM, EDR, Email Security, SOAR, Firewalls, VPN, IDS/IPS), Testing and Threat Intelligence Tools, Vulnerability Testing Tools

What Cencora Offers:

Benefit offerings outside the US may vary by country. Eligibility and effective date may differ for some benefits, especially for team members under collective bargaining agreements.

Affiliated Companies: AmerisourceBergen Services Corporation

Equal Employment Opportunity:

Cencora is committed to equal opportunity employment regardless of race, color, religion, sex, sexual orientation, gender identity, genetic information, national origin, age, disability, veteran status, or other protected classes. Harassment is prohibited. All employment-related processes adhere to these principles.

Cencora provides reasonable accommodations for individuals with disabilities during the employment process. To request accommodations, contact 888.692.2272 or email [e-mail]. Requests are handled on a case-by-case basis.