Lead Analyst - Information Security

AmerisourceBergen

AmerisourceBergen fosters a positive impact on healthcare around the world by advancing the development and delivery of pharmaceuticals and healthcare products.

Our team members are at the heart of everything we do. At Cencora, we are united in our responsibility to create healthier futures, and every person here is essential to us being able to deliver on that purpose. If you want to make a difference at the center of health, come join our innovative company and help us improve the lives of people and animals everywhere. Apply today!

Job Details:

The Senior IAM Specialist, Information Security will deliver and manage a large and complex Identity and Governance Access Management initiatives across the business with the goals of improving efficiency, increasing security posture, and supporting aggressive growth. The Senior IAM Specialist, Information Security will be expected to work with the business to translate IAM Governance functional requirements into technical designs within SailPoint IIQ and other IGA technologies.

PRIMARY DUTIES AND RESPONSIBILITIES:

• Ensure Identity and Access Management Services follows appropriate policies, procedures, operational considerations, IT change control, and IT risk and compliance management programs.
• Drive the design, implementation and management of Identity and Access Management Services which includes Identity Life Cycle Management, Access Management (SSO, federation, multi-factor), Role and Rights Management, Entitlement Review and Attestation (Audit & Assurance) and Identity & Access Analytics.
• Establish standards, driving designs and implementation of appropriate identity and access management processes and controls which help improve operations, lower risk and meet audit and compliance requirements.
• Understand a variety of IAM-related product suites and tools in order to make critical operational and strategic decisions.
• Directly partner with the enterprise Finance, Legal, Audit and Compliance executives to support Internal and External Audits relating to IAM.
• Lead the development and implementation of prudent enterprise security standards, guidelines and procedures to protect the integrity, availability and privacy of all corporate information assets.
• Support the Business Unit and IT executives through the process of prioritizing security initiatives and spending based on relevant business risk and regulatory compliance issues.
• Manage, develop and mentor teams of Identity and Access Management professionals as well as contractors, vendors and services providers.
• Support strategic and tactical security, risk mitigation and regulatory compliance guidance for all IT projects.
• Assist in managing the development of budgets, controls and measurements to monitor progress.
• Make recommendations for succession planning.
• Perform related duties as assigned.

EXPERIENCE AND EDUCATIONAL REQUIREMENTS:

• Bachelor’s Degree in Information Technology, Information Security and Assurance, Computer Science, Cyber Security, Business Analytics or other related field or equivalent work experience.
• Typically requires 7-10 years of combined IT and security work experience with a broad range of exposure to Identity and Access Management functions.
• Experience leading technical teams in a large and complex environment to deliver related capabilities and services.
• Demonstrated successful implementation of security control frameworks and standards.
• Certification in Information Security relevant areas such as Audit (CISA), Security Management (CISM), Security Professional (CISSP) and/or equivalent business experience required.

MINIMUM SKILLS, KNOWLEDGE AND ABILITY REQUIREMENTS:

• Demonstrated ability to collaborate with others to ensure consistent and high-quality results.
• High level of personal integrity with the ability to handle highly sensitive and confidential situations.
• Ability to communicate effectively both orally and in writing.
• Solid project management skills including the ability to manage multiple projects.
• Solid knowledge of information security principles and practices.
• Ability to deal with ambiguity in a dynamic business environment.

EDUCATIONAL QUALIFICATIONS:

• Bachelor’s Degree in Computer Science, Information Technology or any other related discipline or equivalent related experience.

PREFERRED CERTIFICATIONS:

• Certified Cloud Security Professional (CCSP)
• Certification in Information Security Strategy Management (CISM)
• Certified Information Systems Security Professional (CISSP)
• CompTIA Security + Certification
• Systems Security Certified Practitioner (SSCP)
• TS-SCI Security Clearance Certification

WORK EXPERIENCE:

• 6+ years of directly-related or relevant experience, preferably in information security.

SKILLS & KNOWLEDGE:

Behavioral Skills:

• Creativity & Innovation
• Decision Making
• Planning
• Presentation Skills
• Risk-taking

Technical Skills:

• Advanced Encryption
• Cybersecurity
• Information Security Strategy Standards
• Network Solutions and Systems
• Software Development Life Cycle (SDLC)
• Security Tools - SIEM, EDR, Email Security Gateway, etc.

Our team members are at the heart of everything we do. At Cencora, we are united in our responsibility to create healthier futures. If you want to make a difference, come join us and help us improve the lives of people and animals everywhere. Apply today!