What are the responsibilities and job description for the Information Security Analyst position at Johnson & Johnson?
Johnson & Johnson Family of Companies
Title: Information Security Compliance Specialist
Location: Raritan, NJ - Hybrid schedule (3 days onsite)
Duration: 9 months
Pay Rate: $79.99
Benefits on offer for this contract position: Health Insurance, Life insurance, 401K and Voluntary Benefits
Please note that this is a contract role providing services to the Johnson & Johnson Family of Companies through external staffing partners of Kelly OCG. If you are selected for this role, you will be employed by a contract staffing supplier and will not be a member of the Johnson & Johnson Family of Companies.
Summary:
This role involves providing security consulting and assurance for assigned platforms, focusing on risk assessment, security vulnerability evaluations, and compliance. The role also involves overseeing interns and contractors, supporting advanced therapies projects, and tracking security metrics and reports.
Responsibilities:
- Performing risk calculators to identify high risk applications/projects; for those identified, performing application security questionnaires/assessments, identifying security gaps and appropriate remediation actions
- Support Pen Test executions for Key Advanced Therapies applications, identifying remediation plans for issues identified
- Performing Incident trending to ensure security root causes are identified and remediated
- Evaluating static & dynamic vulnerabilities to identify TLM/ALM & other security issues along with the appropriate remediation actions.
- Large experience in SOX, IAPP, GxP, Privacy compliance requirements
- Provide local oversite for interns, employees/Contractors under my responsibility
- Support Key Advanced Therapies projects: o Providing a central point for SC security questions or queries on project support, connecting with the appropriate ISRM team member to ensure complete and accurate responses and/or appropriate involvement
- Navigating between all ISRM SC pillars to obtain knowledge regarding security issues
- Ensures appropriate controls are implemented for Car-T Applications and coordinates alignment with Internal Audit and IT Compliance
- Provide metrics and reports on a weekly basis tracking the entire portfolio, application assessment status, and Risk Acceptance status.
Qualifications:
- Minimum of a Bachelor's degree in Information Security, Cybersecurity or equivalent
- 5 years of Information Security Compliance experience is required
- Sox/Audit experience in pharmaceutical industry is require.
- Must have Cloud-based software controls OT and application security assessment experience
- Excellent written and verbal communication skills is required.
Salary : $80
