BioMarin: A Leader in Biotechnology
BioMarin is a global biotechnology company that relentlessly pursues bold science to translate genetic discoveries into new medicines that advance the future of human health. Our mission is to create transformative medicines for patients with significant unmet medical need.
About Us
Since our founding in 1997, we have applied our scientific expertise in understanding the underlying causes of genetic conditions to develop innovative treatments. We enlist the best talent and create an environment that empowers our teams to pursue bold, innovative science. With this approach, we've produced a diverse pipeline of commercial, clinical, and preclinical candidates that offer well-understood biology and provide opportunities to be first-to-market or offer substantial benefits over existing therapeutic options.
Cyber Security at BioMarin
We are seeking a highly skilled Cyber Security Senior Manager to join our dynamic IT team. The successful candidate will play a pivotal role in ensuring the security assets and infrastructure, protecting our data from potential threats, and maintaining the integrity of our cyber environment. This position requires a deep understanding of cyber security principles, cloud computing, and the ability to implement and manage advanced security measures.
Key Responsibilities
- Research, design, and implement cyber security solutions for BioMarin's security systems and products in compliance with applicable security policies and standards.
- Perform system security administration on various technology platforms, including operating systems, applications, and network security devices, in accordance with defined policies, standards, and procedures of the organization, as well as industry best practices and vendor guidelines.
- Work with IT and business partners to ensure security is factored in the evaluation, selection, installation, and configuration process of hardware and software.
- Cloud Security Management: Design, implement, and manage security measures for cloud-based applications and services.
- Implement and manage security tools such as Cloud Security Posture Management (CSPM), SIEM, network segmentation/security, email security, privilege management, mobile device management, and Endpoint Detection and Response (EDR).
- Ensure cybersecurity-enabled products or other compensating security control technologies reduce identified risk to an acceptable level.
- Design and implement secure solutions to protect against cyber-attacks and ensure the security of the organization's IT infrastructure. Evaluate the financial costs of recommended technologies.
- Conduct and support regular risk assessments and vulnerability testing to identify and mitigate potential security threats.
- Prepare and present regular reports and metrics on the status of cybersecurity efforts to senior management.
- Strong leadership and team management abilities. Oversee Managed Security Services team and provide directions. Manage Cybersecurity ticket queue and SLAs around it.
- Assist in the review and update of cyber security policies, architectures, and standards.
- Ensure compliance with industry standards, regulations, and frameworks such as NIST Cyber Security Framework (CSF).
- Work closely with IT, Enterprise Architecture, and business teams to integrate security measures into development and deployment processes.
- Evaluate and recommend new security technologies and solutions to enhance the organization's security posture.
- Conduct training sessions and workshops to educate employees on security best practices and emerging threats.
- Coordinate and manage assigned Cyber projects, including system upgrades and new technology implementations.
- Support the response to risk-related incidents, including investigations, root cause analysis, and the implementation of corrective actions.
- Stay updated with the latest security trends, technologies, and threats. Continuously improve security architecture and processes.
Requirements
- Education: Bachelor's degree in information technology or a related field.
- Experience: Minimum of 7 years of experience in cyber security, with at least 1 year in cloud security.
- Certifications: Relevant certifications such as CISSP, CISM, CEH, or Azure/AWS Certified Security Specialist. Strong knowledge of cybersecurity frameworks, standards, and best practices.
- Technical hands-on skills and proficiency in cloud platforms (Azure/AWS) and security tools (Identity Management, firewalls, encryption, endpoint, storage, wireless, servers, VPN, URL filtering, disaster recovery).
- Understanding of security frameworks, security architecture, disaster recovery, risk management, incident management/forensics, threat modeling, GRC, and vulnerability management.
- Strong analytical and problem-solving skills, with the ability to assess complex security issues and develop effective solutions. Excel/Power BI preferred.
- Excellent verbal and written communication skills, with the ability to convey complex security concepts to non-technical stakeholders.
- Ability to work effectively in a collaborative team environment.
- Excellent problem-solving and decision-making skills.
- Experience in industries with high security requirements such as healthcare/life sciences or similar.