Head of Cyber Enablement and Compliance

Overview

Work Your Magic with us! Start your next chapter and join Millipore Sigma. Ready to explore, break barriers, and discover more? Our colleagues across the globe love innovating with science and technology to enrich people’s lives with our solutions in Healthcare, Life Science, and Electronics. We are always looking for curious minds that imagine the unimaginable with us.

Your Role

As the Head of Cyber Enablement and Compliance, you play a pivotal role within the Millipore Sigma Life Science (LS) Cyber Security team, reporting directly to the LS CISO. Your responsibilities include tailoring corporate cyber security structures to Millipore Sigma LS business needs, supporting on an operational level, and ensuring constant alignment with Millipore Sigma LS corporate Cyber Security. Your role is crucial in protecting Millipore Sigma LS information assets and maintaining a robust cyber security posture.

• Develop and enhance cyber risk management, compliance, and governance frameworks, aligning with industry best practices and regulatory requirements.
• Support the LS CISO in the designing, implementation and continuous improvement of the Cyber Security strategy egrate cyber risk into LS business risk management strategy.
• Lead teams in developing and maintaining cyber security procedures, standards, and risk management frameworks, including third-party security risks.
• Ensure compliance with legal, regulatory, and industry standards and requirements (e.g. ISO/IEC 27001/27002, NIST CSF, NIS2, CRA, IEC
  62443, PCI DSS, GDPR).
• Implement a comprehensive cyber security training and awareness program. Measure and adjust awareness program effectiveness.
• Provide strategic guidance for advanced IT/OT and cyber risk management practices.
• Oversee risk mitigation efforts, including third-party alignment with defined risk appetite.
• Collaborate with LS CISO, corporate Cyber Security, and Regional and Site Cyber Security Managers.
• Evaluate third-party vendors' security posture.
• Develop KPI frameworks, dashboards, and reports. Present risk-related reports to senior leadership.

This position can be based in either our Burlington, MA or St. Louis, MO site. We do offer a hybrid flexible work arrangement.

• Professional with a positive attitude and capable of contributing to a dynamic and team-oriented culture.
• Bachelor’s Degree or equivalent in Computer Science, Engineering or related field required;
  Master’s degree/MBA is preferred.
• A minimum of 8 years of experience in information security.
• At least 3 years in a leadership role focused on cyber security governance, risk management, and compliance.
• Proven experience in developing and implementing cyber security policies, procedures, and standards.
• Familiarity with legal, regulatory, and industry standards and requirements.
• Extensive experience in developing and implementing risk management frameworks, conducting risk assessments and managing third-party security risks.
• Strong background in regulatory compliance, including conducting and managing audits.
• Understanding the specific security challenges and regulatory requirements of the Life Science, Healthcare or Pharmaceutical industry, including production facilities, is a plus.
• One or more information security certifications such as CISM, CISA, CISSP, relevant ISO certification, Sarbanes-Oxley, Data Privacy laws, or PCI is a plus.
• Knowledge of IT and OT infrastructure, architecture, and security tools.
• Strong analytical and problem-solving skills with the ability to assess complex security issues and develop effective solutions.
• Excellent verbal and written communication skills in English, capable of conveying complex security concepts to non-technical stakeholders.
• Strong interpersonal skills and the ability to work collaboratively with cross-functional teams and external partners.
• Broad knowledge of project management methodologies; experience managing complex, multi-stakeholder initiatives; ability to design and implement process improvements.

$132,200-$188,300

The offer range represents the anticipated low and high end of the base pay…