Lead, Governance, Risk & Compliance

Job not on LinkedIn

🔥 0 minutes ago

🦀 Maryland – Remote

🦀 Maryland – Remote

💵 $155.5k - $188.2k / year

⏰ Full Time

🟠 Senior

🚔 Compliance

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Emergent BioSolutions

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 1998

🏥 Healthcare

🏭 Manufacturing

⚕️ Healthcare Insurance

Healthcare • Manufacturing • Healthcare Insurance

Emergent BioSolutions is a leading public health company that delivers protective and life-saving solutions to communities around the world. They specialize in developing, manufacturing, and supplying medical countermeasures aimed at addressing public health threats, including the opioid epidemic. Emergent partners with biopharma innovators, governments, and NGOs to enhance national security and public health preparedness through strategic collaborations and innovative solutions.

📋 Description

• Lead implementation and governance of data classification and labeling, data loss prevention, insider risk management, data discovery and inventory, and records and information management technologies • Partner with business stakeholders to identify, classify, and protect information • Define governance processes for data owners, custodians, and users • Establish data protection metrics, KPIs, and executive reporting • Lead remediation of inadequately protected data and oversee policy compliance across technology platforms • Drive adoption of data protection capabilities through training and change management • Improve organizational maturity against ISO 27001, CMMC, and related NIST-based frameworks • Lead cybersecurity maturity assessments and maintain cybersecurity KPIs and metrics • Establish cybersecurity governance frameworks and operating models • Support cyber councils, governance forums, and program steering committees • Align cybersecurity initiatives with business objectives • Create and maintain the cybersecurity risk register and support risk quantification and prioritization • Evaluate technology, operational, third-party, and data-related risks and document assessments and approvals • Support risk dashboards for executive management and governance councils • Assist vulnerability management by documenting risks and plans of action • Develop and maintain information security policies • Lead security awareness, training, and company-wide cybersecurity campaigns • Lead internal cybersecurity audits and readiness activities • Support internal and external audits and assessments • Support manufacturing security workstreams involving network segmentation, secure remote access, logging, and OT incident management • Create and lead cyber training and awareness for manufacturing sites • Support periodic business continuity planning and cybersecurity tabletop exercises • Collaborate with IT and business stakeholders as an individual contributor reporting to the IT Vice President and CISO

🎯 Requirements

• Bachelor’s Degree in Business or Information Systems, or equivalent experience • 5+ years in cybersecurity, compliance, or risk management, or 7+ years of related/industry experience • Experience leading cybersecurity projects and programs • Experience working with cybersecurity tools, methodologies, and technologies • Experience supporting cybersecurity programs within manufacturing environments • Familiarity with cybersecurity risks associated with industrial operations • Understanding of network and computing, vulnerability management, and IAM/PAM • Familiarity with SOX, SSAE 18 SOC reports, NIST CSF, ISO 27001, and CMMC • Strong interpersonal, collaboration, oral, written, and presentation skills • Program management and organizational skills • Ability to author policy documents and provide business risk assessments • Ability to identify sensitive information including PII, PHI, and clinical data • Demonstrated experience resolving conflicts across organizations • Demonstrated experience with organization-wide communications • Demonstrated experience managing and documenting security risks

🏖️ Benefits

• Additional incentive compensation may include merit increases, annual bonus, and/or long-term incentives in the form of stock options • Comprehensive benefits package • Reasonable accommodations for individuals with disabilities • Equal Opportunity/Affirmative Action workplace