Senior Manager Information Security

AmerisourceBergen; United States; Remote; USD 120,000 - 180,000; Full time

Job summary

AmerisourceBergen is seeking a Security Manager to lead security initiatives and manage a team within their organization. This role requires over 7 years of experience in information security, strong leadership skills, and a Master's degree or equivalent experience. The successful candidate will oversee application security programs, collaborate with various departments, and ensure compliance with security standards while enhancing the organization's cybersecurity posture.

Qualifications

• 7+ years of relevant experience, including 3+ years in management.
• Preferred certifications: CISA, CISSP, CISM, ITIL, OSCP, PMP.
• Master's Degree in related field or equivalent experience.

Responsibilities

• Manage security programs and remediation strategies.
• Develop and implement security policies and procedures.
• Lead a high-performing team in designing and implementing security solutions.

Skills

Coaching

Conflict Resolution

Critical Thinking

Multitasking

People Management

Planning

Presentation Skills

Education

Master’s Degree in Business Administration

Master’s Degree in Computer Science

Master’s Degree in Information Technology

Equivalent Experience

Tools

SIEM

EDR

Email Security

SOAR

Firewall

Job description

Our team members are at the heart of everything we do. At Cencora, we are united in our responsibility to create healthier futures, and every person here is essential to us being able to deliver on that purpose. If you want to make a difference at the center of health, come join our innovative company and help us improve the lives of people and animals everywhere. Apply today!

Job Details

Responsibilities:

• Manage a team of individuals and vendors to support application security programs, including remediation strategies and efforts to protect infrastructure and third-party application vulnerabilities.
• Oversee planning, execution, and management of security engagements related to the functional area of responsibility.
• Develop key reports on vulnerabilities for stakeholders and serve as a subject matter expert (SME) for ISO programs.
• Advise on strategic and tactical security initiatives and collaborate to meet organizational objectives.
• Develop, refine, and implement enterprise-wide security policies, procedures, and standards to ensure compliance.
• Support documentation and tracking of policies, procedures, standards, and system configurations, recommending changes as necessary.
• Participate in setting goals/KPIs, budget creation, and performance management of the Security Strategy team.
• Lead the security team in validating and gathering evidence for escalated security incidents, identifying root causes, and advising on remediation.
• Review internal processes for potential improvements and automation opportunities.
• Provide technical/management leadership and act as a SME; assist in training as needed.
• Align technical and business processes with other departments, including project design, implementation, and monitoring.
• Coordinate and report on security initiatives related to application development and infrastructure.
• Lead the design, engineering, and implementation of security strategies, frameworks, and solutions.
• Provide vision and leadership for cybersecurity processes and culture.
• Maintain security documentation and collaborate with research and enterprise security teams on joint processes.
• Enhance information security programs to adapt to evolving requirements.
• Oversee business resiliency efforts, including continuity planning and disaster recovery.
• Lead a high-performing team in designing, building, testing, and implementing security solutions, and support the IT risk & compliance team.

Educational Qualifications:

• Master’s Degree in Business Administration, Computer Science, Information Technology, or related field, or equivalent experience.

Preferred Certifications:

• CISA, CISSP, CISM, ITIL, OSCP, PMP

Work Experience:

• 7+ years of relevant experience, including 3+ years in management, preferably in information security.

Skills & Knowledge:

Behavioral Skills:

• Coaching, Mentoring, Conflict Resolution, Critical Thinking, Multitasking, People Management, Planning, Presentation Skills

Technical Skills:

• IT Risk Management, IT Controls, Cyber Attack Mitigation, Security Standards, Enterprise Architecture, Network Security, Service Level Management, Threat Modelling

Tools Knowledge:

• Microsoft Office, Security Tools (SIEM, EDR, Email Security, SOAR, Firewall, etc.), Security Testing and Threat Intelligence Tools, Vulnerability Testing Tools

What Cencora Offers:

Benefits vary by country and are aligned with local practices. Eligibility and effective date may differ for some benefits, especially for those under collective bargaining agreements.

Affiliated Companies: AmerisourceBergen Services Corporation

Equal Employment Opportunity:

Cencora provides equal employment opportunities regardless of race, color, religion, sex, sexual orientation, gender identity, genetic information, national origin, age, disability, veteran status, or membership in any protected class. Harassment is prohibited. All employment-related processes comply with equal opportunity principles and are non-discriminatory.

Cencora is committed to reasonable accommodations for individuals with disabilities during the employment process. To request accommodations, contact 888.692.2272 or email [e-mail]. Accommodation requests are handled on a case-by-case basis. Messages unrelated to accommodations will not be responded to.