Manager, Cyber Security Engineering
Description
Who We Are
BioMarin is a global biotechnology company that relentlessly pursues bold science to translate genetic discoveries into new medicines that advance the future of human health.
Since our founding in 1997, we have applied our scientific expertise in understanding the underlying causes of genetic conditions to create transformative medicines, using a number of treatment modalities.
Using our unparalleled expertise in genetics and molecular biology, we develop medicines for patients with significant unmet medical need. We enlist the best of the best – people with the right technical expertise and a relentless drive to solve real problems – and create an environment that empowers our teams to pursue bold, innovative science. With this distinctive approach to drug discovery, we’ve produced a diverse pipeline of commercial, clinical and preclinical candidates that have well-understood biology and provide an opportunity to be first-to-market or offer a substantial benefit over existing therapeutic options.
About Corporate Groups
It takes a village, and at BioMarin our corporate groups are the people behind our success. Groups such as IT, Finance, Legal, Global Compliance & Ethics, and our People Team provide foundational support of all areas of operation at BioMarin.
- Research, design, and implement cyber security solutions for BioMarin’s security systems and products in compliance with the organization’s applicable security policies and standards
- Perform system security administration on various technology platforms, including operating systems, applications and network security devices, in accordance with the defined policies, standards and procedures of the organization, as well as with industry best practices and vendor guidelines
- Work with IT and business partners to ensure that security is factored in the evaluation, selection, installation and configuration process of hardware and software
- Cloud Security Management: Design, implement, and manage security measures for cloud-based applications and services.
- Implement and manage security tools such as Cloud Security Posture Management (CSPM), SIEM, network segmentation/security, email security, privilege management, mobile device management and Endpoint Detection and Response (EDR)
- Ensure cybersecurity-enabled products or other compensating security control technologies reduce identified risk to an acceptable level
- Design and implement secure solutions to protect against cyber-attacks and ensure the security of the organization's IT infrastructure. Evaluate the financial costs of recommended technologies.
- Risk Assessment: Conduct and support regular risk assessments and vulnerability testing to identify and mitigate potential security threats.
- Prepare and present regular reports and metrics on the status of cybersecurity efforts to senior management.
- Strong leadership and team management abilities. Oversee Managed Security Services team and provide directions. Manage Cybersecurity ticket queue and SLAs around it
- Assists in the review and update of cyber security policies, architectures and standards
- Compliance: Ensure compliance with industry standards, regulations and frameworks such as NIST Cyber Security Framework (CSF)
- Collaboration: Work closely with IT, Enterprise Architecture and business, and other teams to integrate security measures into the development and deployment processes.
- Evaluate and recommend new security technologies and solutions to enhance the organization's security posture
- Training and Awareness: Conduct training sessions and workshops to educate employees on security best practices and emerging threats.
- Coordinate and manage assigned Cyber projects, including system upgrades and new technology implementations.
- Incident Management: Support the response to risk-related incidents, including investigations, root cause analysis, and the implementation of corrective actions
- Continuous Improvement: Stay updated with the latest security trends, technologies, and threats. Continuously improve security architecture and processes.
- Education: Bachelor’s degree in information technology or a related field.
- Experience: Minimum of 7 years of experience in cyber security, with at least 1 years in cloud security.
- The position requires the individual to be on site for at least 2 days a week in BioMarin office at San Rafael, USA or Cork, Ireland. Additional flexibility and exception can apply
- Certifications: Relevant certifications such as CISSP, CISM, CEH, or Azure/ AWS Certified Security Specialist. Strong knowledge of cybersecurity frameworks, standards, and best practices.
- Technical hands-on skills and proficiency in cloud platforms (Azure/AWS) and security tools (Identity Management, firewalls, encryption, endpoint, storage, wireless, servers, VPN, URL filtering, disaster recovery).
- Understanding of security frameworks, security architecture, disaster recovery, risk management, incident management / forensics, threat modeling, GRC and vulnerability management.
- Analytical Skills: Strong analytical and problem-solving skills, with the ability to assess complex security issues and develop effective solutions. Excel/Power BI preferred.
- Communication Skills: Excellent verbal and written communication skills, with the ability to convey complex security concepts to non-technical stakeholders.
- Team Player: Ability to work effectively in a collaborative team environment.
- Excellent problem-solving and decision-making skills
- Industry Experience: Experience in industries with high security requirements such as healthcare / life sciences or similar
Note: This description is not intended to be all-inclusive, or a limitation of the duties of the position. It is intended to describe the general nature of the job that may include other duties as assumed or assigned.
Equal Opportunity Employer/Veterans/Disabled
An Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status and will not be discriminated against on the basis of disability.