Information Security Risk Manager in São Paulo, Brazil

Job Overview

The Information Security Risk Manager is a crucial role within IQVIA organization, responsible for helping to establish and maintain IQVIA’s risk management program, which is designed to ensure that the company’s IT systems and information assets are adequately protected.

The individual in this position will be responsible for identifying and evaluating on information security risks in a manner that meets IQVIA’s regulatory and other compliance requirements.

The individual will proactively engage the various clients, business units and other internal departments and organisations to implement practices that meet IQVIA’s defined policies and standards for information risk management.

A successful candidate will demonstrate an ability to work independently and in an organised manner. They will communicate very effectively, manage their workload independently and coach others to success. They will demonstrate strong technical ability and experience, as well as diplomacy and the ability to work calmly under pressure.

Essential Responsibilities

• Plans, executes and conducts ongoing risk assessment, self-assessment and reviews of various operations, including assessing risks, determining scope, executing test procedures, reporting results and making recommendations for improvement.

• Evaluates compliance with legal, regulatory, operational and IT policies and procedures, and partners with stakeholders to develop sustainable remediation plans to compliance issues and control gaps, and actively drives issues and risks to closure.

• Works with others to help identify advanced security risks and exposures, determine the causes of security non-compliances, designs and recommends solutions to prevent and mitigate future incidents. This will include identifying applications of functional knowledge and existing methodologies to highly complex problems.

• Follows up on deficiencies identified in monitoring reviews, self-assessments, automated assessments, and internal and external audits to ensure that appropriate remediation measures have been taken.

• Evolves the risk monitoring program to identify opportunities for enhancements and manages the risk exception process.

• Partners with the technology organization to implement and maintain IQVIA’s integrated control framework, which includes requirements from NIST CSF, COBIT, HIPAA, etc.

Qualifications

• Bachelor’s Degree Computer Science, a related field, or equivalent experience

• Equivalent work experience may substitute for degree

• 3 years of related work experience

• CISSP – Certified Information Systems Security Professional

• Certified Information Security Manager

• Certified in Risk and Information Security Controls

IQVIA is a leading global provider of clinical research services, commercial insights and healthcare intelligence to the life sciences and healthcare industries. We create intelligent connections to accelerate the development and commercialization of innovative medical treatments to help improve patient outcomes and population health worldwide. Learn more at https://jobs.iqvia.com

IQVIA is a world leader in using data, technology, advanced analytics, and expertise to help customers drive healthcare – and human health – forward. Together with the companies we serve, we are enabling a more modern, more effective and more efficient healthcare system, and creating breakthrough solutions that transform business and patient outcomes.

To get there, it takes diverse skills and a curiosity to explore new possibilities. No matter your role, everyone at IQVIA contributes to our shared goal of improving human health. Thank you for your interest in growing your career with us.

EEO Minorities/Females/Protected Veterans/Disabled