Director, Information Security Risk Management

4 tygodni temu

Warsaw, Polska IQVIA Pełny etat

Role Location: Poland or Portugal

Job Overview

The successful candidate will play an integral role in developing the information security Risk Management framework for IQVIA and will manage risks identified through a variety of IT and operational audits. You will be responsible for managing the development of team members and will engage with senior business stakeholders to create targeted risk assurance programs based on identified, assessed and emerging risks. You will have strong understanding of Risk and Controls, and you will have extensive line management experience, managing the workload and development of team members. As the Director for Information Security Risk Management, you’ll be responsible for (but not limited to) the following:

Leading risk-related projects Maintaining ongoing testing and development of Information Security Risk Management framework, liaising with senior stakeholders and providing regular updates to stakeholders. Producing risk reports when required Working closely with other senior leaders within the team regarding training and guidance to support the business. Working with Business Units and stakeholders to ensure adequate, cost effective and timely protection/risk transfer for business activities. Creating a Supplier Risk Management Framework

Key Responsibilities:

Own the development and integration of the Information Security Risk Management Framework, Risk Appetite Statements, and Risk Policies and Procedures across the organization. Work closely with business and senior management to identify and manage risks aligned with the organization’s strategy and risk appetite. Provides strategic and tactical guidance to business decision-makers. Contribute to a strong governance structure and risk management across all business entities. Assess the impact of emerging risks and regulations, providing input and support for pragmatic solutions. Establish a comprehensive risk reporting system and process. Assist to remediate risks identified through established processes and procedures. Provides recommendations for remediation based on the reviews and risk assessments performed. Assist key business stakeholders in identifying and responding effectively to risk. Define key risk and performance indicators (KRIs/KPIs) for evaluating risk management performance. Integrate business continuity and crisis management into the organization's risk management strategies. Support the configuration of the TPRM & Risk Management solution for consistency with local processes. Assist in reviewing third parties, including due diligence reviews. Perform review of vendor engagements, understanding the functions of effective third-party risk.

Qualifications:

Bachelor's Degree Computer Science, a related field, or equivalent experience required. 10 years of experience within the information security domain managing Risk frameworks. Deep understanding and demonstrated experience of end-to-end risk management lifecycle, including key components and their relationships with internal and external stakeholders. Experience in non-financial/operational risk - developing and implementing risk frameworks, policies, and procedures. Demonstrated experience leading risk management workshops, obtaining and synthesizing inputs from technical and non-technical stakeholders throughout the enterprise. Experience in conducting Third Party reviews is advantageous. Experience operating as a part of a GRC program in alignment with common information technology management frameworks such as NIST, ITIL, ISO 27001 etc. Security-related qualifications such as CISM or CISSP , CRISC are a plus.

IQVIA is a leading global provider of advanced analytics, technology solutions and clinical research services to the life sciences industry. We believe in pushing the boundaries of human science and data science to make the biggest impact possible – to help our customers create a healthier world. Learn more at

  • Information Risk Manager

    1 tydzień temu

    Warsaw, Polska Aion Bank Pełny etat

    We are currently looking for a Information Risk Manager / IRM Expert ready to join our adventure and share our ambition.  What you will be doing? We are seeking a highly skilled and experienced Information Risk Manager to join our dynamic team in a leading financial institution. As part of the second line of defence, you will play a...

  • Information Security Advisory Specialist

    6 dni temu

    Warsaw, Polska Sportradar Pełny etat

    Job DescriptionAt Sportradar's Information Security Team, which boasts over 30 security experts in 6 global locations, we are excited to announce an opening for a Security Advisory Specialist. Reporting to the Head of Security Advisory, the successful candidate will be a pivotal member of our Advisory function, contributing significantly to our cybersecurity...

  • Global Risk Assessments Manager

    2 tygodni temu

    Warsaw, Polska JTI Pełny etat

    We are JTI, Japan Tobacco International, and we are present in 130 countries. We have spent years innovating, creating new and better products for the consumers to choose from . This is our business. But not only. Our business is our people. Their talent. Their potential. We believe that when they are free to be themselves , and they are given the...

  • Information Security Risk Management Coordinator

    4 tygodni temu

    Warsaw, Polska ERGO Technology & Services Pełny etat

    About Us ERGO Technology & Services S.A. (ET&S S.A.) was established in January 2021 following the integration of ERGO Digital IT and Atena into one entity, leveraging both companies strengths and best practices. ET&S S.A. belongs to ERGO Technology & Services Management AG, the technology holding of ERGO Group AG, supporting millions of internal and...

  • Cyber Risk Director

    1 miesiąc temu

    Warsaw, Polska Citi Pełny etat

    Are you looking for a career move that will put you at the heart of a global financial institution? By Joining Citi, you will become part of a global organisation whose mission is to serve as a trusted partner to our clients by responsibly providing financial services that enable growth and economic progress. Team/Role Overview The Technology and Cyber...

  • Cyber Risk Director

    1 dzień temu

    Warsaw, Polska 11101 Citibank Europe plc Poland Pełny etat

    Are you looking for a career move that will put you at the heart of a global financial institution? By Joining Citi, you will become part of a global organisation whose mission is to serve as a trusted partner to our clients by responsibly providing financial services that enable growth and economic progress. Team/Role Overview The Technology and Cyber...

  • Global Risk Assessments Manager

    2 tygodni temu

    Warsaw, Polska JTI Pełny etat

    We are JTI, Japan Tobacco International, and we are present in 130 countries. We have spent years innovating, creating new and better products for the consumers to choose from . This is our business. But not only. Our business is our people. Their talent. Their potential. We believe that when they are free to be themselves , and they are given the...

  • Information Security Compliance Analyst

    1 miesiąc temu

    Warsaw, Polska DLA Piper Pełny etat

    The roleThe Information Security team are responsible for security activities across the DLA Piper International firm.The Information Security and Compliance Analyst will ensure security controls are operating effectively and in accordance with relevant regulatory and industry best practices. They will identify, report and act upon audit and compliance...

  • Information Security Compliance Analyst

    4 tygodni temu

    Warsaw, Polska DLA Piper Pełny etat

    The roleThe Information Security team are responsible for security activities across the DLA Piper International firm.The Information Security and Compliance Analyst will ensure security controls are operating effectively and in accordance with relevant regulatory and industry best practices. They will identify, report and act upon audit and compliance...

  • IT Security Risk Consultant @

    2 tygodni temu

    Warsaw, Polska Digital Hub Warsaw at Bayer Pełny etat

    Bachelor's degree with 5 years of relevant Information Technology/Security experienceDemonstrated experience in cyber security risk assessment , managing critical situations as well as analytical, conceptual, and technical exposure and understanding of one of the major cloud technologies such as Amazon Web Services, Microsoft Azure and Google Cloud...

  • IT Security Risk Consultant

    1 miesiąc temu

    Warsaw, Polska Digital Hub Warsaw at Bayer Pełny etat

    technologies-expected : Amazon Web Services Microsoft Azure Google Cloud Platform responsibilities : Partner with CSRM stakeholders, Information Technology (IT) and business to develop security strategies and Risk Assessment strategies for Bayer globally in support of business goals. Assist in the development of security policies, standards, patterns, and...

  • IT Security Risk Consultant

    4 tygodni temu

    Warsaw, Polska Digital Hub Warsaw at Bayer Pełny etat

    technologies-expected : Amazon Web Services Microsoft Azure Google Cloud Platform responsibilities : Partner with CSRM stakeholders, Information Technology (IT) and business to develop security strategies and Risk Assessment strategies for Bayer globally in support of business goals. Assist in the development of security policies, standards, patterns, and...

  • Director – Resilience and Corporate Security EMEA

    4 tygodni temu

    Warsaw, Polska Manpower Pełny etat

    Director – Resilience and Corporate Security EMEA & Asia Miejsce pracy: Warszawa Your responsibilities Implement enterprise-wide operational resilience initiatives in the EMEA and Asia regions Advise and partner with key stakeholders on resilience matters Engage with leadership teams to identify, engage, train, and upskill dedicated BC Coordinators and...

  • IT Security Risk Consultant

    1 miesiąc temu

    Warsaw, Polska Bayer Pełny etat

    For Digital Hub Warsaw, we are looking for: IT Security Risk Consultant Key Tasks & Responsibilities: Partner with CSRM stakeholders, Information Technology (IT) and business to develop security strategies and Risk Assessment strategies for Bayer globally in support of business goals. Assist in the development of security policies, standards, patterns,...

  • IT Security Risk Consultant

    4 tygodni temu

    Warsaw, Polska Bayer Pełny etat

    For Digital Hub Warsaw, we are looking for: IT Security Risk Consultant Key Tasks & Responsibilities: Partner with CSRM stakeholders, Information Technology (IT) and business to develop security strategies and Risk Assessment strategies for Bayer globally in support of business goals. Assist in the development of security policies, standards, patterns,...

  • Technology Audit Director

    4 tygodni temu

    Warsaw, Polska JPMorgan Chase & Co. Pełny etat

    Are you looking for an exciting opportunity to join a dynamic and growing team in a fast paced and challenging area? This is a unique opportunity for you to work in our EMEA Audit Function and partner with the Business. We are proud of our reputation for excellence, integrity, and collaboration. Our priorities of strong governance, transparency, and...

  • Technology Audit Director

    2 miesięcy temu

    Warsaw, Polska JPMorgan Chase & Co. Pełny etat

    Are you looking for an exciting opportunity to join a dynamic and growing team in a fast paced and challenging area? This is a unique opportunity for you to work in our EMEA Audit Function and partner with the Business. We are proud of our reputation for excellence, integrity, and collaboration. Our priorities of strong governance, transparency, and...

  • IT Risk Analyst

    1 miesiąc temu

    Warsaw, Polska Dentons Business Services EMEA Pełny etat

    about-project : As an IT Risk Analyst, you will be responsible for ensuring the security of the company's information systems and data and organization’s adherence to relevant information security policies, standards, and regulations. You will perform risk assessments, respond to customer inquiries, and monitor third-party suppliers. You will also...

  • IT Security Risk Consultant

    2 tygodni temu

    Warsaw, Polska Digital Hub Warsaw at Bayer Pełny etat

    technologies-expected :Amazon Web ServicesMicrosoft AzureGoogle Cloud Platformresponsibilities :Partner with CSRM stakeholders, Information Technology (IT) and business to develop security strategies and Risk Assessment strategies for Bayer globally in support of business goals.Assist in the development of security policies, standards, patterns, and...

  • Senior IT Security Risk Consultant

    1 miesiąc temu

    Warsaw, Polska emagine sp. z o.o. Pełny etat

    technologies-expected : Amazon Web Services Microsoft Azure Google Cloud Platform about-project : Industry: Pharmaceutical Location: hybrid (office in Warsaw) Project language: English and Polish Type of contract: employment contract Remuneration: 30 000 pln gross per month responsibilities : Partner with CSRM stakeholders, Information Technology (IT), and...