Senior Associate - Cybersecurity Risk and Controls Analyst

HOW MIGHT YOU DEFY IMAGINATION?

Youve earned your degree. How will you use that achievement to reach your goals? Do more with the knowledge youve worked hard to acquire and the passion you already have. At Amgen, our shared missionto serve patientsdrives all that we do. It is key to our becoming one of the worlds leading biotechnology companies, reaching over 10 million patients worldwide. Become the professional you are meant to be in this meaningful role.

Senior Associate Cybersecurity Risk and Controls Analyst

Live

What you will do

Lets do this. Lets change the world. In this role you will support assigned capabilities within the Governance, Risk and Compliance (GRC) team, with a focus on risk management activities like engaging and leading discussions with internal and external customers, evaluating, documenting and communicating information security risks, recommending and testing IT controls and advising on improvements of IT controls.

You will bring forth out of the box thinking, an agile approach, proven domain expertise and an innate understanding of IT risks and controls to empower IT process and product owners to build and maintain secure and compliant IT solutions.

You will perform the following activities and any additional tasks required to evaluate and continuously improves Amgen's information security posture, to effectively reduce risks and satisfy the security objectives of the organization.

• Advise project teams and application owners on information security risks and controls
• Participate in projects or initiatives where a security risks and controls specialist is needed, with a focus on addressing risks by ensuring appropriate security controls are implemented
• Evaluate compliance with security requirements
• Evaluate IT controls design and implementation in various IT security processes
• Test operating effectiveness of IT controls, including user access management, change management and computer operations for complex IT systems
• Assess the risks of control deficiencies and identify mitigating controls
• Clearly document and optimally communicate risks and risk mitigation actions
• Understand and leverage ISO and NIST information security frameworks to establish accountability and responsibility for controls within the information systems organization
• Ensure quality of work and timeliness across different functional deliverables; take ownership of issues and coordinate through to completion
• Providing input and ideas based on industry best practices and actual experience to help evolve the security risk and controls areas
• Keeping up-to-date with emerging technological trends, security assessment and risk management methodologies and standards
• Coordinate the outsourced 24x7 security event handling service
• Build and improve processes, critical metrics and service output
• Works on the decrease of false positives
• Review and optimize the configuration of security tools, integrations with other technologies, documentation and delivery of the service
• Assist incident responders as they develop and coordinate response, containment and remediation capabilities
• Support cyber threat intelligence, security operations and other security teams in day by day activities

Win

What we expect of you

We are all different, yet we all bring our unique contributions to serve patients. The professional we seek for this role is an experienced cybersecurity analyst with these qualifications.

Basic Qualifications:

Master's

Or

Bachelors degree and 2 years of directly related experience

Or

Associate degree and 6 years of directly related experience

Or

High school diploma / GED & 8 years of directly related experience

Preferred Qualifications:

• Sophisticated industry recognized security certification (i.e. CISA, CISM, CISSP, CRISC, Security+, etc.)
• Solid understanding of Information Security principles: confidentiality, integrity, and availability
• Knowledge of international standards for Information Technology and Information Security (i.e. ISO 2700x, NIST CSF, COBIT, ITIL, etc.)
• Exceptional ability to apply critical thinking to sophisticated risk scenarios
• Validated ability to understand new technologies and paradigms such as cloud, emerging Big Data technologies, lean methodologies to propose appropriate controls and compliance mentorship
• Strong written and verbal communication, including the ability to explain technical matters to a non-technical audience
• Ability to demonstrate solid sense of ownership, detail orientation, keen focus on quality and setting clear expectations
• Exceptional teamwork encompassing cross-functional teams, peer relationships, advising, understanding and appreciating differences
• Working in large / global corporate environments involving multiple businesses
• Fluency in English language is required

Thrive

Some of the vast rewards of working here

As we work to develop treatments that deal with others, we also work to care for our teammates professional and personal growth and well-being.

• Full support and career-development resources to expand your skills, enhance your expertise, and increase your potential along your career journey
• A diverse and inclusive community of belonging, where teammates are empowered to bring ideas to the table and act
• Generous Total Rewards Plancomprising health, finance and wealth, work/life balance, and career benefitswith compensation and benefits rated above 4 stars (out of 5) on Glassdoor

Apply now

for a career that defies imagination

Objects in your future are closer than they appear. Join us.

careers.amgen.com

Join Us

If you're seeking a career where you can truly make a difference in the lives of others, a career where you can work at the absolute forefront of biotechnology with the top minds in the field, you'll find it at Amgen.

Amgen, a biotechnology pioneer, discovers, develops and delivers innovative human therapeutics. Our medicines have helped millions of patients in the fight against cancer, kidney disease, rheumatoid arthritis and other serious illnesses.

As an organization dedicated to improving the quality of life for people around the world, Amgen fosters an inclusive environment of diverse, ethical, committed and highly accomplished people who respect each other but compete intensely to win. Together, we live the Amgen values as we continue advancing science to serve patients.

Amgen is an Equal Opportunity employer and will consider all qualified applicants for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, or disability status.

We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.

Amgen requires all staff in the United States, Puerto Rico and Canada to be vaccinated from COVID 19 as a condition of employment. In accordance with applicable law, Amgen will provide reasonable accommodations to staff members who qualify on the basis of a medical reason or a sincerely held religious belief, practice, or observance. Such accommodation may not pose an undue hardship to Amgen, its operations, or its staff.