IT Security Manager

A biotech company in New Jersey is seeking a new IT Security Manager to join their team in Middlesex County. This hybrid role will focus on third-party cyber risk management, security assurance, and audit-related activities across a global environment., * Lead third-party cyber risk management activities, including security assessments, controls, and risk tracking * Develop and maintain security standards, documentation, metrics, and reporting for vendor-related risk * Support audit planning and execution, including assurance reviews and audit calendars * Collaborate with Procurement, Legal, Privacy, Compliance, and QA partners to align security requirements * Monitor supplier risk trends and contribute to security improvement roadmaps and remediation efforts

At least 5 years of experience in Third-Party Cyber Risk Management, Information Security, or Risk Management * Bachelor’s degree in Computer Science, MIS, or a related field, or an equivalent combination of relevant experience and training * Certified CISA, CRISC, CISM, CISSP, or a relevant certification * Experience with Security and Risk Management frameworks and regulations, such as ISO, NIST, GDPR, SOX, HIPAA, FISMA, and GxP * Experience with GRC tools, such as ServiceNow, Galvanize, Vanta, MetricStream, Archer, or WolfPAC

Desired Skills: * Experience in a pharmaceutical, biotech, or healthcare environment * Strong understanding of vendor management processes and assurance frameworks, including SOC 1 and SOC 2 audits * Experience working in multinational organizations and global virtual teams * Strong business acumen and stakeholder communication skills * Experience developing audit roadmaps, dashboards, and key risk indicators