Manager, Information Security Assurance

**Job Summary**The Information Security Assurance Manager reports to the Business Information Security Officer (BISO) and collaborates with business and IT colleagues to deliver critical capabilities in support of strategic information security goals. This includes the operational management of information protection solutions, the development of security awareness & training, the management of phishing campaigns, the delivery and reporting of information security metrics, and other business-facing information security services as assigned. The role requires excellent communication skills and the ability to support multiple efforts across information security disciplines.**Job Description**As a member of the Information Security team and under the supervision of the BISO, the Information Security Assurance Manager is responsible for information protection solutions in alignment with the IS strategy and roadmap. Responsibilities include working with the business and IT on the identification and protection of vital information and data (“crown jewels”). The Information Security Assurance Manager leads the information security awareness program, which is a suite of continuous activities that promote safe computing practices for colleagues, including ongoing phishing campaigns. In addition, this role supports the BISO on the development and ongoing management/reporting of key metrics that demonstrate the value and progress of the information security program. The expectation is that the individual successfully coordinates multiple tasks and priorities continuously with limited supervision.**Information Protection*** Support the business and IT on identification of company vital information/data and establishing corresponding protections.* Monitor and respond to alerts and reports of information or data exposure in coordination with SOC and IT teams as required.* Conduct root cause analysis and implement corrective actions for identified threats.* Maintain and improve information protection rulesets in coordination with information security, business, and IT colleagues, and assist in the identification and remediation or mitigation of exposures.**Security Awareness & Training*** Support the BISO in the development and delivery of organization-wide information security training content.* Measure the effectiveness of training initiatives and continuously improve content.* Maintain the Information Security SharePoint presence to communicate policy, best practices, guidance, and other materials.* Develop and deliver awareness materials to educate personnel about information security best practices and promote a culture of security awareness within the organization.* Establish and publish technical security guidance in coordination with information security colleagues.**Phishing Simulations*** Design and execute phishing simulation campaigns to assess employee awareness through the company’s phishing delivery platform.* Analyze and report on results, conduct surveys and interviews to gain feedback to identify improvements that will strengthen user behavior.* Collaborate with internal teams to tailor simulations to specific business contexts.**Security Metrics*** Support the BISO in collection of data and reporting for key performance and risk indicators (KPIs/KRIs) as defined to measure the information security program.* Manage periodic benchmarking of the information security program in support of the BISO through coordination with IS, IT and other stakeholders.To be successful in this Information Security Assurance Manager role, you must have and maintain knowledge of the information and cybersecurity frameworks and best practices, exhibit strong analytical skills and judgement, and demonstrate excellent communication in collaboration with stakeholders. You must also stay up to date with industry advancements and continuously improve security protocols to protect the organization's data from threats.**Qualifications/ Required**Knowledge/ Experience and Skills:* 5+ years of experience in information security, including experience in data loss protection, insider risk management, and information security awareness and training.* Strong understanding of cybersecurity frameworks and best practices.* Excellent communication and interpersonal skills, with the ability to explain complex technical concepts to non-technical stakeholders, both verbally and written.* Experience with cloud security (e.g., AWS, Azure, Google Cloud) is desirable.* Convey a can-do approach, even in the face of obstacles and constraints, by assessing what is in front of you and effectively and efficiently optimizing what you have, whether it is working on something new or thinking about how to do something better.* Demonstrate teamwork and communication skills through knowledge sharing, collaboration, and relationship-building.* Exhibit the capacity to actively learn and apply specific domain knowledge and best practices to continually enhance and improve.Educational Qualifications* Bachelor’s degree in computer science, Information Security, or a related field.* Certifications such as CISSP, CISM, CISA, or similar are highly desirable.**Competencies** **Accountability for Results -** Stay focused on key strategic objectives, be accountable for high standards of performance, and take an active role in leading change. **Strategic Thinking & Problem Solving -** Make decisions considering the long-term impact to customers, patients, employees, and the business. **Patient & Customer Centricity -** Maintain an ongoing focus on the needs of our customers and/or key stakeholders. **Impactful Communication -** Communicate with logic, clarity, and respect. Influence at all levels to achieve the best results for Otsuka. **Respectful Collaboration -** Seek and value others’ perspectives and strive for diverse partnerships to enhance work toward common goals. **Empowered Development -** Play an active role in professional development as a business imperative.Minimum $117,027.00 - Maximum $175,030.00, plus incentive opportunity: The range shown represents a typical pay range or starting pay for individuals who are hired in the role to perform in the United States. Other elements may be used to determine actual pay such as the candidate’s job experience, specific skills, and comparison to internal incumbents currently in role. Typically, actual pay will be positioned within the established range, rather than at its minimum or maximum. This information is provided to applicants in accordance with states and local laws.**Application Deadline**: This will be posted for a minimum of 5 business days.**Company benefits:** Comprehensive medical, dental, vision, prescription drug coverage, company provided basic life, accidental death & dismemberment, short-term and long-term disability insurance, tuition reimbursement, student loan assistance, a generous 401(k) match, flexible time off, paid holidays, and paid leave programs as well as other company provided benefits.Come discover more about Otsuka and our benefit offerings; .**Disclaimer:**This job description is intended to describe the general nature and level of the work being performed by the people assigned to this position. It is not intended to include every job duty and responsibility specific to the position. Otsuka reserves the right to amend and change responsibilities to meet business and organizational needs as necessary.Otsuka is an equal opportunity employer. All qualified applicants are encouraged to apply and will be given consideration for employment without regard to race, color, sex, gender identity or gender expression, sexual orientation, age, disability, religion, national origin, veteran status, marital status, or any other legally protected characteristic.If you are a qualified individual with a disability or a disabled veteran, you may request a reasonable #J-18808-Ljbffr