Director, Information Security Governance, Risk, Compliance

Job not on LinkedIn

🔥 12 hours ago

🇺🇸 United States – Remote

💵 $112k - $236k / year

⏰ Full Time

🔴 Lead

🚔 Compliance

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Viatris

WebsiteLinkedInAll Job Openings

10,000+ employees

Founded 2020

🏥 Healthcare

💊 Pharmaceuticals

⚕️ Healthcare Insurance

Healthcare • Pharmaceuticals • Healthcare Insurance

Viatris is a global healthcare company committed to improving access to high-quality medicines for patients worldwide. They offer a diverse range of products including brands and generics, and focus on various therapeutic areas that address both noncommunicable and infectious diseases. Viatris operates with a goal of providing reliable medication supply, ensuring that patients receive the treatments they need when and where they need them. The company is dedicated to healthcare empowerment, facilitating healthier living through various stages of life, supported by their global healthcare gateway. Their operations are grounded in a strong commitment to sustainability, corporate governance, and regulatory compliance across different geographies.

📋 Description

• Develop and maintain enterprise cybersecurity governance, risk, and compliance strategies aligned with organizational objectives and regulatory requirements • Direct enterprise risk assessments, compliance reviews, and control maturity evaluations across business and technology environments • Lead development and implementation of cybersecurity policies, standards, procedures, and governance frameworks • Provide strategic oversight for audit readiness activities supporting internal audits, regulatory inspections, and third-party assessments • Review and communicate enterprise cyber risk posture, key risk indicators, and remediation priorities to executive leadership and governance committees • Oversee third-party cybersecurity risk management processes including supplier risk evaluations and contractual security requirements • Coordinate enterprise-wide remediation strategies for vulnerabilities, audit findings, and risk treatment plans • Guide strategic planning and budgeting activities for cybersecurity governance and compliance initiatives • Collaborate with legal, privacy, quality, manufacturing, and IT leadership to align cybersecurity governance with enterprise risk management objectives • Support development of business continuity and operational resilience strategies for critical business processes • Partner with architecture and engineering teams to ensure security controls and compliance requirements are integrated into technology solutions • Promote cybersecurity awareness and risk-informed decision making across business functions and leadership teams • Support organizational initiatives involving mergers, acquisitions, and digital transformation by evaluating cybersecurity and compliance risks

🎯 Requirements

• Minimum of a Bachelor’s degree with a focus in MIS, IT or Engineering or equivalent is required • Related experience and/or education may be considered • Minimum of eight years of IT or Cybersecurity experience is required • Knowledge of cybersecurity and privacy principles, frameworks, and regulatory requirements applicable to global pharmaceutical organizations • Knowledge of enterprise risk management methodologies, governance structures, and compliance assessment techniques • Knowledge of audit practices, internal controls, and regulatory compliance requirements including SOX, HIPAA, GDPR, and GxP expectations • Knowledge of third-party risk management concepts and vendor governance processes • Knowledge of incident management, vulnerability management, and security operations governance • Knowledge of security architecture concepts, cloud technologies, and data protection methodologies

🏖️ Benefits

• Competitive salaries • Benefits • Inclusive environment • Equal opportunity employment