Information Technology Security Manager

C&G Consulting Services, Inc; New Jersey; On-site; USD 120,000 - 180,000; Full time

Job summary

C&G Consulting Services, Inc. in the United States seeks a TPCRM Risk Manager to organize and drive TPCRM security and audits, collaborating with partners and suppliers to manage confidential data and digital services.

This role blends business insight with technical risk expertise to influence stakeholders enterprise-wide. You will create awareness, monitor risk status, and ensure controls remain effective in a rapidly evolving security landscape, with a focus on pharma/biotech relevance and

Qualifications

• Minimum 5 years of experience in TPCRM information security and risk management.
• Experience defining and implementing security management processes and controls.
• Experience setting up a TPCRM security improvement roadmap and driving actions and processes.
• Experience tracking, measuring, and communicating the quality of risk management processes and controls.
• Experience with security and risk management frameworks and regulations (ISO, NIST, GDPR, SOX, HIPAA).
• Knowledge of regulatory compliance frameworks for multinational Pharma/Biotech (FISMA, GDPR, NIST, GxP).
• Experience working with multinational organizations and global virtual teams.
• Strong business acumen and domain knowledge of Pharma/Biotech.

Responsibilities

• Lead TPCRM security activities and audits across the enterprise.
• Collaborate with third parties to assess security, compliance, quality, and risk management.
• Educate stakeholders on TPCRM security and establish trusted relationships with partners.
• Drive risk assessments, security improvements, and audit remediations.
• Align security operations to policies, standards, and procedures.
• Report on KPI and KRI to senior leadership.

Skills

Analytical skills

Technical skills

Communication skills

Business acumen

Team collaboration

Risk management mindset

Strategic thinking

Negotiation

Education

CISA

CRISC

CISM

CISSP

Tools

ServiceNow

Galvanize

Vanta

MetricStream

Archer

WolfPAC

Job description

• Minimum 5 years of experience in TPCRM information security and risk management


• Experience defining and implementing security management processes and controls


• Experience setting up a TPCRM security improvement roadmap and driving the implementation of corresponding actions and processes


• Experience tracking, measuring, and communicating the quality of risk management processes and controls applicable to the IT department


• Experience working with security and risk management frameworks and regulations (e.g., ISO, NIST, GDPR, SOX, HIPAA, etc.)


• Good understanding of current and emerging cybersecurity and privacy regulations and practices, and how other enterprises are employing them


• Experience working with GRC tools (e.g., ServiceNow, Galvanize, Vanta, MetricStream, Archer, WolfPAC, etc.)


• Excellent understanding of vendor management processes and related assurance frameworks (e.g., SOC 1 and SOC 2, Type I/II audits, and auditor reports)


• Certified CISA, CRISC, CISM, CISSP, or relevant certification


• Experience in a Pharma / Biotech / Healthcare company preferred


• Good knowledge of regulatory compliance frameworks applicable to a multinational Pharma / Biotech company (e.g., FISMA, GDPR, NIST, GxP)


• Strong business acumen, including domain-specific knowledge of Pharma / Biotech


• Experience working in multinational organizations and global virtual teams

Knowledge / Skills

• Excellent analytical and technical skills


• Excellent communication skills to connect effectively with different stakeholders and to deal with the different interests in the organization


• Excellent written, verbal, communication, and presentation skills


• Strong soft and interpersonal skills, including teamwork, facilitation, and negotiation


• Excellent planning and organizational skills, with strong attention to detail


• Enable proactive identification and resolution of risks by collaborating across multiple teams


• Foster strong relationships with colleagues and business leaders to enable risk mitigation through effective communication of TPCRM risk status to key stakeholders


• Lead and contribute to outcomes for risk assessments, security improvements, and audit remediations


• Support alignment of security operations to policies, standards, and procedures


• Contribute to, maintain, and report on Key Performance Indicators (KPI) and Key Risk Indicators (KRI)


• Keen sense of self, ethics, and effort, as well as the willingness to go the extra mile to achieve important goals

Position Summary

• Collaboration with third parties is of strategic value. This collaboration includes the exchange of confidential information and personal data, and the outsourcing of digital services.


• Trust and assurance are critical factors in the relationship with partners and suppliers, requiring assessment of their capabilities with respect to security, compliance, quality, and risk management.


• The TPCRM Risk Manager is responsible for organizing and driving activities around TPCRM security and audits.


• This role requires a mix of business and technical acumen to influence and communicate with stakeholders across the enterprise.


• Create awareness and educate stakeholders on TPCRM security, acting as an important link in establishing trusted relationships with partners and suppliers.


• Ensure that the organization remains in control of critical data in the context of an increasing security threat landscape.