Lead Information Security Auditor, GRC

🕒 Outubro 19

🐊 Florida – Remoto

🐊 Florida – Remote

💵 $104.134 - $163.640 / ano

⏰ Tempo Integral

🟠 Sênior

👮‍♂️ Cibersegurança / Engenheiro de Segurança

🦅 Patrocina Visto H1B

Esta empresa já patrocinou vistos H1B no passado.

👻 Score fantasma 0%

O que significa: a chance de ninguém estar realmente contratando para esta vaga.Como ler: 60% ou mais significa que achamos que é uma vaga fantasma. Pontuações mais baixas preocupam menos.Como pontuamos: tempo em aberto, republicações, vagas abertas vs tamanho do time, rapidez para fechar vagas, e se o salário está divulgado.Observação: é uma estimativa de dados públicos, não um julgamento da empresa. Vagas reais podem ter pontuação alta, então use como uma dica, não como um fato.

Candidatar-se

Encontrar Vagas Remotas Similares

CONMED Corporation

SiteLinkedInTodas as Vagas

1001 - 5000 funcionários

Fundada em 1970

🏥 Saúde

💼 Consultoria

📦 Logística

💰 Post-IPO Debt em 2022-05

Healthcare • Consulting • Logistics

A CONMED Corporation é uma empresa global de tecnologia médica que desenvolve, fabrica e vende equipamentos e instrumentos cirúrgicos especificamente para cirurgias Ortopédicas, Gerais e Gastrointestinais (GI). A empresa foca na inovação e possui uma ampla gama de produtos, incluindo ferramentas cirúrgicas motorizadas, implantes, unidades eletrocirúrgicas e soluções para evacuação de fumaça. Através de sua missão de apoiar parceiros de saúde e melhorar os resultados para os pacientes, a CONMED dedica-se a aprimorar a eficiência e a segurança cirúrgica em diversas especialidades médicas.

Descrição

• Lead the development, implementation, and maintenance of cybersecurity policies, standards, procedures, and governance frameworks • Establish governance processes aligned with business objectives and regulatory requirements • Maintain alignment with NIST CSF, NIST 800-53, ISO 27001, SOX, GDPR, NIS2, and applicable industry regulations • Develop and present cybersecurity metrics, KPIs, KRIs, and risk dashboards to executive leadership • Facilitate cybersecurity steering committees and governance forums • Track remediation and ensure accountability for risk mitigation • Lead enterprise-wide cybersecurity risk assessments and risk management programs • Maintain a cyber risk register covering enterprise IT, manufacturing systems, cloud services, and connected medical devices • Evaluate risks involving patient safety, operational resilience, intellectual property, regulatory exposure, and business continuity • Perform risk assessments for new technologies, business initiatives, mergers, acquisitions, and strategic projects • Develop risk treatment plans and monitor mitigation efforts through completion • Translate technical security risks into business impact statements • Lead cybersecurity compliance efforts and coordinate internal audits, external audits, regulatory inspections, and customer security assessments • Manage evidence collection, control validation, remediation tracking, maturity assessments, and gap analyses • Partner with Internal Audit, Legal, Compliance, and Regulatory Affairs • Oversee audit findings and corrective action plans through closure • Lead third-party cybersecurity due diligence and risk assessments • Establish supplier security requirements and contractual security obligations • Evaluate supplier security posture and drive remediation and risk acceptance • Partner with Engineering, Product Development, Quality, and Regulatory Affairs on product security governance • Oversee cybersecurity risk assessments for medical and surgical devices • Support secure development governance and cybersecurity documentation • Facilitate coordinated vulnerability disclosure governance and vulnerability management oversight • Lead cybersecurity awareness, education, and compliance initiatives • Develop targeted awareness programs and support phishing awareness, policy compliance, and security training • Measure and report program effectiveness and compliance trends • Support business impact analyses, resilience planning, tabletop exercises, and cyber crisis management planning • Evaluate recovery capabilities and resilience controls • Provide leadership for cybersecurity governance, risk, and compliance initiatives • Mentor cybersecurity professionals • Serve as primary cybersecurity liaison for Audit, Compliance, Legal, Quality, and Regulatory Affairs • Present risk and compliance updates to executive leadership, committees, and external stakeholders • Support strategic cybersecurity planning and roadmap development

🎯 Requisitos

• Bachelor's degree in Cybersecurity, Information Technology, Business, Engineering, Risk Management, or related field (or equivalent experience) • 7+ years of experience in cybersecurity, information security governance, risk management, compliance, audit, or related disciplines • Experience developing and managing cybersecurity governance, risk, and compliance programs • Experience conducting risk assessments and managing enterprise risk registers • Experience supporting internal audits, external audits, and regulatory examinations • Strong understanding of cybersecurity frameworks and regulatory requirements • Experience in healthcare, medical device manufacturing, life sciences, or regulated industries • Deep knowledge of NIST CSF, NIST 800-53, ISO 27001, SOX, GDPR, NIS2, and third-party risk management practices • Experience managing enterprise GRC platforms such as ServiceNow GRC, Archer, OneTrust, or AuditBoard • Experience developing executive risk reporting, metrics, and board-level presentations • Familiarity with medical device cybersecurity regulations and product security risk management • Professional certifications preferred: CISSP, CRISC, CISM, CGRC (formerly CAP), CISA, ISO 27001 Lead Implementer or Lead Auditor • This position is not eligible for employer-visa sponsorship

🏖️ Benefícios

• Competitive compensation • Excellent healthcare including medical, dental, vision and prescription coverage • Short & long term disability plus life insurance -- cost paid fully by CONMED • Retirement Savings Plan (401K) -- CONMED matches your contributions dollar for dollar, with the potential for up to 7% per pay period • Employee Stock Purchase Plan -- allows stock purchases at discounted price • Tuition assistance for undergraduate and graduate level courses • Employee Referral Program incentives

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Enviar Currículo