IT Security Manager

Tandym-Group; Plainsboro Township (NJ); Hybrid; USD 96,000 - 107,000; Full time

Job summary

Tandym-Group is seeking an IT Security Manager for a hybrid role in Plainsboro, NJ. The candidate will oversee third-party cyber risk management, security assurance, and audit-related activities in a global environment.

The role emphasizes on-site collaboration with a standard work week. Requirements include a 5+ year track record in risk management and security, a relevant bachelor’s degree, and professional certifications such as CISA/CRISC/CISM/CISSP.

Qualifications

• At least 5 years in third-party cyber risk management or information security.
• Bachelor’s degree in Computer Science, MIS or related field.
• Certified CISA, CRISC, CISM, CISSP or equivalent.
• Experience with ISO, NIST, GDPR, SOX, HIPAA, FISMA, or GxP.

Responsibilities

• Lead third-party cyber risk management activities including assessments and risk tracking.
• Develop and maintain security standards, metrics, and reporting for vendor risk.
• Support audit planning and execution, including assurance reviews and calendars.
• Collaborate with Procurement, Legal, Privacy, Compliance and QA to align security requirements.
• Monitor supplier risk trends and contribute to security roadmaps and remediation.

Skills

Third-Party Cyber Risk Management

Information Security

Risk Management

Vendor Management

Security Governance

Education

Bachelor’s in Computer Science or MIS

Tools

ServiceNow

Galvanize

Vanta

MetricStream

Archer

WolfPAC

Job description

IT Security Manager (CR/512005) Plainsboro, New Jersey

Salary: USD70 - USD78 per hour

A biotech company in New Jersey is seeking a new IT Security Manager to join their team in Middlesex County. This hybrid role will focus on third-party cyber risk management, security assurance, and audit-related activities across a global environment.

About the Opportunity:

Shift: Day

Schedule: Monday to Friday

Hours: Standard business

Setting: Hybrid (at least 2 days a week onsite)

Responsibilities:

• Lead third-party cyber risk management activities, including security assessments, controls, and risk tracking
• Develop and maintain security standards, documentation, metrics, and reporting for vendor-related risk
• Support audit planning and execution, including assurance reviews and audit calendars
• Collaborate with Procurement, Legal, Privacy, Compliance, and QA partners to align security requirements
• Monitor supplier risk trends and contribute to security improvement roadmaps and remediation efforts

Qualifications:

• At least 5 years of experience in Third-Party Cyber Risk Management, Information Security, or Risk Management
• Bachelor’s degree in Computer Science, MIS, or a related field, or an equivalent combination of relevant experience and training
• Certified CISA, CRISC, CISM, CISSP, or a relevant certification
• Experience with Security and Risk Management frameworks and regulations, such as ISO, NIST, GDPR, SOX, HIPAA, FISMA, and GxP
• Experience with GRC tools, such as ServiceNow, Galvanize, Vanta, MetricStream, Archer, or WolfPAC

Desired Skills:

• Experience in a pharmaceutical, biotech, or healthcare environment
• Strong understanding of vendor management processes and assurance frameworks, including SOC 1 and SOC 2 audits
• Experience working in multinational organizations and global virtual teams
• Strong business acumen and stakeholder communication skills
• Experience developing audit roadmaps, dashboards, and key risk indicators