IT Risk - Cuajimalpa, México - Takeda Pharmaceutical

Takeda Pharmaceutical

Empresa verificada

Cuajimalpa, México

hace 2 semanas

Publicado por:

Rodrigo Fernández

Reclutador de talento para beBee

_ OBJECTIVES/PURPOSE _

Execute the full lifecycle of information security and data privacy thirdparty risk assessments as needed, either individually or through available resources, within the region
Assist and execute control assessment activities to identify control effectiveness, maturity and areas for improvements within region
Collaborate with internal thirdparty relationship owners and thirdparty representatives to recommend necessary security and privacy controls to effectively mitigate risks to Takeda
Assist in promoting thirdparty risk management processes across business lines to help influence a strong culture of proactive awareness for thirdparty security risks
Improve and help foster a positive end user experience with business stakeholders by enhancing our program to accommodate an agile business environment

_ ACCOUNTABILITIES _

Execute the full lifecycle of information security and data privacy thirdparty risk assessments as needed, either individually or through available resources
Collaborate with internal thirdparty relationship owners or thirdparty representatives in their efforts to provide responses to the security and privacy risk assessment questionnaire
Assist and execute regional control assessment activties to identify control effectiveness, maturity and areas for improvements
Effectively translate thirdparty responses to assessment questionnaire, using sound judgement, into concise risk exposure reporting for delivery to internal stakeholders
Partner with internal thirdparty relationship owners and thirdparty representatives to recommend necessary security and privacy controls to effectively mitigate risks to Takeda
Ensure robust tracking and remediation of thirdparty security and privacy risk exposures identified through assessment processes
Provide any necessary training and awareness related to the thirdparty security process
Contribute to the gathering and distribution of periodic program metrics and/or dashboards
Mentor and train new risk analysts

Dimensions and Aspects

Technical/Functional

Experience in evaluating thirdparties for the presence of fundamental information security and data privacy controls
Ability to effectively negotiate appropriate remediation of security gaps with third party representatives to ensure protection of Takeda information

Leadership

Decision-making and Autonomy

Assists the Regional Information Risk Assurance Lead with global risk and control assurance activities and regional execution
Responds to risk stakeholders in a timely manner, engages colleagues when needed, and escalates when necessary

Education, Behavioral Competences and Skills
-
Essential

Bachelor's degree or equivalent
13 years of experience in information security and/or thirdparty risk management
Ability to manage multiple workstreams simultaneously
Ability to think critically and analytically
Capable of effectively managing shifting priorities
Strong communication, interpersonal, presentation, and organizational skills
Comfortable operating in and navigating a global organization where risk stakeholders can be located across geographies and time zones

-
Desired