Remote IT Security Manager - Third-Party Risk & Compliance

Meet Life Sciences; Princeton (NJ); Hybrid; USD 124,000 - 165,000; Full time

Job summary

Meet Life Sciences is seeking an experienced IT Security Manager to lead Third-Party Cyber Risk Management (TPCRM) across a global enterprise. You will govern vendor security, drive regulatory compliance programs, and manage cyber risk assessments and audit responses.

The role requires 5+ years in information security or IT risk management, experience with regulated environments (pharma/biotech preferred), and familiarity with NIST, ISO 27001, GDPR, HIPAA, SOX and other standards.

Qualifications

• Bachelor's degree in CS/IS/Cybersecurity or related field.
• 5+ years of information security or IT risk management experience.
• Experience in Pharma/Biotech or other highly regulated environments.
• Strong knowledge of NIST, ISO 27001, GDPR, SOX, HIPAA, FISMA and GxP.
• Experience conducting vendor security assessments and third-party reviews.
• Experience reviewing SOC 1/SOC 2 reports and audit findings.
• Familiarity with GRC platforms such as ServiceNow, Archer, MetricStream, Galvanize or Vanta.
• Professional certifications such as CISSP, CISM, CRISC or CISA preferred.

Responsibilities

• Support and enhance the TPCRM program.
• Develop, maintain vendor security standards and documentation.
• Conduct security risk assessments and manage remediation.
• Evaluate controls, evidence, and assurance reports.
• Develop TPCRM metrics, KPIs, KRIs, and executive reporting.
• Monitor third-party security risks across the business.
• Collaborate with Procurement, Legal, Compliance, Privacy, Quality and IT.
• Drive compliance with evolving cybersecurity regulations including NIS2.
• Develop and execute cybersecurity audit programs and risk-based plans.
• Track audit findings and remediation efforts.

Skills

5+ years information security

Third-Party Risk

Regulated environments

Security frameworks

Vendor security assessments

SOC 1/SOC 2 reviews

GRC tools

Certifications

Education

Bachelor's degree in Computer Science / Information Systems / Cybersecurity

Tools

ServiceNow

Archer

MetricStream

Galvanize

Vanta

Job description

Meet Life Sciences is seeking an experienced IT Security Manager to lead Third-Party Cyber Risk Management (TPCRM) across a global enterprise. You will govern vendor security, drive regulatory compliance programs, and manage cyber risk assessments and audit responses.

The role requires 5+ years in information security or IT risk management, experience with regulated environments (pharma/biotech preferred), and familiarity with NIST, ISO 27001, GDPR, HIPAA, SOX and other standards.