Digital Asset Security Expert Electronics

Digital Asset Security Expert Electronics

Ready to explore, break barriers, and discover more? We know you’ve got big plans – so do we! Our colleagues across the globe love innovating with science and technology to enrich people’s lives with our solutions in Healthcare, Life Science, and Electronics. Together, we dream big and are passionate about caring for our rich mix of people, customers, patients, and planet.

Everything we do in Electronics is to help us deliver on our purpose of being the company behind the companies, advancing digital living. We are dedicated to being the trusted supplier of high-tech materials, services and specialty chemicals for the electronics, automotive and cosmetics industries. We foster a global collaborative organization made up of individuals who have the passion to win, obsess about the customer, are relentlessly curious and act with urgency.

As a member of Cyber Protection & Digital Asset Security, you play a pivotal role within the Merck Electronics (EL) Cyber Security team. You are part of the global Cyber Security team, interfacing with the EL business and corporate Cyber Security team. You consult and support in implementation of security controls for applications and ensure effective response and recovery processes. You contribute to the development of technical capabilities, particularly in SAP and Cloud environments, with close alignment to Merck corporate Cyber Security. Your role is crucial in protecting Merck’s EL IT and OT assets, software-based products, and applications and maintain a robust Cyber Security posture.

Key Responsibilities:

1. Consult and support in implementation of security controls for applications, SAP systems, Cloud environments, and digital products.
2. Communicate the vision for business application security, maintain guidelines, secure SDLC, and implement CI/CD security controls.
3. Oversee SAP security strategies, including user access management and maintaining security settings.
4. Define and improve the cloud security governance framework, ensure compliance, and engage with new cloud technologies.
5. Develop incident response and recovery plans in collaboration with the business for IT and OT assets, software-based products, and applications.
6. Collaborate with engineering teams to address vulnerabilities and oversee penetration testing.

Who you are:

1. Bachelor’s degree or equivalent in intelligence studies, computer science, engineering or related field.
2. Minimum of 5 years’ experience with a focus on Cyber Security or equivalent following industry standards and regulatory requirements (e.g. ISO27000, NIST CSF, NIS2, PCI DSS, KRITIS / B3S PHARMA).
3. Demonstrated experience in developing and implementing security controls in applications. Proven experience in implementing SAP security controls, utilizing tools like AWS Security Hub, Azure Security Center, and Google Cloud Security Command Center as well as applying secure coding practices, conducting security testing, and ensuring compliance with security standards considered as a plus.
4. Demonstrated experience in developing and implementing incident response and recovery strategies.
5. 1 or more industry-recognized security, or audit professional certifications (e.g. CISA, CISM, CISSP, CCSP).
6. Understanding of the specific security challenges and regulatory requirements of the chemical and semiconductor industry, including production facilities, is a plus.

What we offer: We are curious minds that come from a broad range of backgrounds, perspectives, and life experiences. We celebrate all dimensions of diversity and believe that it drives excellence and innovation, strengthening our ability to lead in science and technology. We are committed to creating access and opportunities for all to develop and grow at your own pace. Join us in building a culture of inclusion and belonging that impacts millions and empowers everyone to work their magic and champion human progress!

Apply now and become a part of our diverse team!