Security, Risk, and Assurance - Business Analyst

Overview

Supplier Security, Risk, and Assurance (SSRA) is part of the Information Protection and Privacy organization (IPP).

IPP is accountable for ensuring the overall information protection risk is managed at client. The SSRA team focuses on suppliers where the information protection risk could result in a major or critical impact on the client business. SSRA staff perform and provides assistance with RFx process, supplier risk assessments, contract negations, and on site assurance visits.

In 2016 SSRA are also standing up processes to provide ongoing monitoring of suppliers and assistance with termination of supplier agreements.

Assisting with these two activities is the focus of position being recruited.

· The business analyst will perform a lead role in implementation of the target operating model for processes to monitor suppliers.

· They will also assist in refining and documenting the monitoring process as well as supplier termination process.

· Key responsibilities will include contributing to analysis of potential elements to monitor; collecting information on suppliers from public and internal sources; developing and ongoing creation of reporting dashboards; organizing and recording information in electronic document storage areas; and executing and reviewing completion of the monitoring process for suppliers.

· The role will involve liaising closely with SSRA staff and interaction with supplier business unit contract owners.

Key responsibilities are:

· Execution of supplier monitoring process, detailed development to refine process, and documentation

· Support refinement of business case demonstrating benefits from monitoring process

· Engage business units and key stakeholders, including providing updates and gaining approval and buy-in for monitoring activities

· Escalate and help asses potential security issues detected for remediation actions

· Skills required:

· Excellent presentation development skills, stakeholder management skills, written and oral communication skills

· Strong analytical business process design and refinement capabilities to deliver effective solutions

· Able to assimilate new information and concepts rapidly and apply the knowledge to processes

· Flexibility and initiative to work independently in a matrix organization across geographies and cultures

· Broad Information Security knowledge, covering the security domains within the scope of ISO 27001.

· Ability to lead process improvement/design working teams

· Able to hit the ground running and demonstrate a persistent drive to completion

· Successful candidates will have experience demonstrating a proven delivery of complex global projects across multiple departments with the ability to drive alignment and rapid decision making.

· Pharmaceutical business and information security related experience a plus.

· Pharmaceutical business and information security related experience a plus.

For more information, please contact

Shobha Mishra

973-967-3440

Shobha.MishraATartechinfo.com