Analyst 3 - Information Security (contract)

Johnson & Johnson Family of Companies

Title: Information Security Analyst

Location: Raritan, NJ

Duration: 9 months

Pay Rate: $ 62.57

Benefits on offer for this contract position: Health Insurance, Life insurance, 401K and Voluntary Benefits

Please note that this is a contract role providing services to the Johnson & Johnson Family of Companies through external staffing partners of Kelly OCG. If you are selected for this role, you will be employed by a contract staffing supplier and will not be a member of the Johnson & Johnson Family of Companies.

Responsibilities:

• Responsible for advancing Operational Technology (OT) asset inventories at manufacturing plants, support the engineering teams in the collection of inventories where needed.
• Deliver Operational Technology (OT) cybersecurity risk assessments of manufacturing plants and the technologies that run them, following ISRM cybersecurity assessment methodology
• Support the roll out of administrative controls for cybersecurity at the internal sites
• Lead external service providers to deliver cybersecurity assessments of Contract Manufacturing Operation sites

Qualifications:

• A BA/BS degree or equivalent experience is required for this position.
• At least five (5) years of cybersecurity focused on manufacturing, laboratories, or logistics, working with IT/OT, automation and engineering industrial controls is required.
• Experience with supply chain and manufacturing sites required, preferably across multiple sectors and the unique security requirements.
• Experience performing site-based risk assessments and providing results to senior leadership required.
• Advanced knowledge of information security processes and principles in explaining the business value of cybersecurity required
• Operating knowledge of one or more manufacturing processes is extremely helpful as is familiarity with the System Development Life
• Ability to independently author and edit documentation of high quality, accuracy and completeness required
• Any of the Certifications below are preferred but not required:
• Cybersecurity (CISM, CISSP)
• Audit (CISA)
• Manufacturing or risk management (CRISC)
• ISA/IEC 62443 Cybersecurity Fundamentals Specialist
• ISA/IEC 62443 Cybersecurity Risk Assessment Specialist
• ISA/IEC 62443 Cybersecurity Design Specialist