Senior Associate - Cybersecurity Risk and Controls Analyst

February 20

🏄 California – Remote

Although this job is listed in California, this company may be open to hiring remote in other states.

🐊 Florida – Remote

Although this job is listed in Florida, this company may be open to hiring remote in other states.

💵 $99k - $115.5k / year

⏰ Full Time

🟠 Senior

👮‍♂️ Security Engineer

🦅 H1B Visa Sponsor

Apply Now

Receive Emails with Similar Jobs

Amgen

WebsiteLinkedInAll Job Openings

Amgen is a global leader in biotechnology, focusing on the development and commercialization of innovative medicines made from living cells. The company aims to treat serious illnesses, often targeting diseases with limited therapeutic options. Amgen emphasizes scientific innovation and is committed to ethical research, patient safety, and environmental sustainability. It actively engages in clinical trials and is known for its contributions to the fields of cancer treatment and obesity management among others.

Biologics • Human therapeutics • Development of novel products

10,000+ employees

Founded 1980

🧬 Biotechnology

💊 Pharmaceuticals

🔬 Science

💰 Post-IPO Debt on 2022-12

📋 Description

• Support assigned capabilities within the Governance, Risk and Compliance (GRC) team • Focus on risk management activities like engaging and leading discussions with internal and external customers • Evaluating, documenting and communicating information security risks • Recommending and testing IT controls and advising improvements of IT controls • Advise project teams and application owners on information security risks and controls • Participate in projects or initiatives where a security risks and controls specialist is needed • Evaluate compliance with security requirements • Evaluate IT controls’ design and implementation in various IT security processes • Test operating effectiveness of IT controls • Assess the risks of control deficiencies and identify mitigating controls • Clearly document and optimally communicate risks and risk mitigation actions • Understand and leverage ISO and NIST information security frameworks • Ensure quality of work and timeliness across different functional deliverables • Build and improve processes, critical metrics and service output

🎯 Requirements

• Master's Or Bachelor’s degree and 2 years of directly related experience • Or Associate degree and 6 years of directly related experience • Or High school diploma / GED & 8 years of directly related experience • Sophisticated industry recognized security certification (i.e. CISA, CISM, CISSP, CRISC, Security+, etc.) • Solid understanding of Information Security principles: confidentiality, integrity, and availability • Knowledge of international standards for Information Technology and Information Security (i.e. ISO 2700x, NIST CSF, COBIT, ITIL, etc.) • Exceptional ability to apply critical thinking to sophisticated risk scenarios • Validated ability to understand new technologies and paradigms such as cloud, emerging Big Data technologies, lean methodologies to propose appropriate controls and compliance mentorship • Strong written and verbal communication, including the ability to explain technical matters to a non-technical audience • Ability to demonstrate solid sense of ownership, detail orientation, keen focus on quality and setting clear expectations • Exceptional teamwork encompassing cross-functional teams, peer relationships, advising, understanding and appreciating differences • Working in large / global corporate environments involving multiple businesses • Fluency in English language is required

🏖️ Benefits

• A comprehensive employee benefits package, including a Retirement and Savings Plan with generous company contributions • Group medical, dental and vision coverage • Life and disability insurance • Flexible spending accounts • A discretionary annual bonus program, or for field sales representatives, a sales-based incentive plan • Stock-based long-term incentives • Award-winning time-off plans • Flexible work models, including remote and hybrid work arrangements, where possible