Information Security GRC - Compliance Specialist

HOW MIGHT YOU DEFY IMAGINATION?

Youve worked hard to become the professional you are today and are now ready to take the next step in your career. How will you put your skills, experience and passion to work toward your goals? At Amgen, our shared missionto serve patientsdrives all that we do. It is key to our becoming one of the worlds leading biotechnology companies, reaching over 10 million patients worldwide. Come do your best work alongside other innovative, driven professionals in this meaningful role.

Information Security - Compliance Specialist

What you will do

Lets do this. Lets change the world. In this vital role you will lead and support Compliance activities that support the mission, priorities, and objectives of Amgens Cybersecurity & Digital Trust (CDT) team. The ISA Process is an assessment process for reviewing systems enterprise wide ensuring compliance with various regulatory and privacy requirements. Assessments are reviewed and outputs are leveraged for other processes to reduce any identified risks and protect and secure Amgens information.

• Serve as the Integrated System Assessment Process Owner.
• Manage the day-to-day Integrated System Assessment Compliance Process with collaborators and business owners.
• Educate and inform stakeholders and business owners on the assessment process
• Develop and implement comprehensive compliance strategies that drive fit for purpose assessments.
• Manage the updates and improvements related to the Integrated System Assessment process.
• Measure the effectiveness of compliance through targeted metrics and feedback mechanisms, adjusting strategies as needed.
• Improve Amgens maturity posture related to Compliance. Support the ongoing assessment activities.
• Collaborate with internal partners including IT, Legal, Compliance, Quality, Privacy, and Audit to ensure a unified approach compliance across the company.
• Ensure operational excellence of the service, platforms and supporting technology and maintain compliance and process consistency to achieve operational objectives
• Maintains, socializes, and improves guidance and training across the enterprise.
• Partners with internal ServiceNow team to drive improvements with the process
• Ensure information related policies align with HIPAA, PCI, GxP, SOX, IP and other applicable regulations
• Assist and inform team members with Record Retention requirements
• Liaise with business units to ensure good information practices and controls are effective and appropriately meet relevant compliance, information risk, policy and regulatory requirements
• Provide guidance on global information management policies, controls and services
• Address records and information management capabilities and practices in support of existing and evolving information and compliance risks
• Actively engage with leadership to inform strategic direction of the service and gain multi-functional support for strategic program development

What we expect of you

We are all different, yet we all use our unique contributions to serve patients. The security professional we seek is a detail oriented with these qualifications.

OR

Masters degree and 2 years of Information Security experience

Bachelors degree and 4 years of Information Security experience

Associates degree and 8 years of Information Security experience

High school diploma / GED and 10 years of Information Security experience

• ServiceNow Experience required
• Ability to identify and inform management of issues that impact compliance
• Experience writing new and evolving existing compliance policies, and interpret relevant legislation and regulations that drive policy
• Customer service experience and management of global information management services
• Possesses solid project management, process improvement, analytical, and presentation skills
• Experience supporting effective compliance policies enterprise-wide
• Guide and educate staff in good information management practices and how to effectively manage their physical and electronic information
• Understands data classification, data protection and records retention, what drives each, and how each is important to information management standard methodologies
• Prior personnel and service delivery management experience
• Ability to independently manage priorities and meet deadlines in a fast-paced, virtual team environment
• Working experience in Agile / DevOps environment
• Must be team-oriented, placing priority on the successful completion of team goals
• Demonstrated formal technical support and customer success management experience with a technology company while exhibiting good communication, advisory skills, attention to detail, critical thinking, and analytical expertise relevant to information management
• Demonstrated ability to develop, document, lead, and communicate processes then, follow accepted IS policies and standards while working independently and providing recommendations on strategies
• In depth understanding of software development lifecycle and the ability to assess new technology capabilities as they present themselves in the market with capacity to move products from Demo and Proof of Concept to Pilot and Production quickly
• Experience delivering new technologies, mitigating risk and delivering innovation while developing training programs designed to educate end users about basic and specialized applications in a dynamic team environment
• Practical Knowledge of Information Security standards and policies like ISO 27001/27002, NIST, and others
• Preferred certifications:
• Certified Information Professional (CIP)
• Certified Information Governance Officer (CIGO)
• Information Governance Professional Certification (IGP)
• Certified Information Security Manager (CISM)
• Certified Information Systems Security Professional (CISSP)
• SANS Global Information Assurance Certifications (GIAC)

What you can expect of us

As we work to develop treatments that take care of others, we also work to care for our teammates professional and personal growth and well-being.

The expected annual salary range for this role in the U.S. (excluding Puerto Rico) is posted. Actual salary will vary based on several factors including but not limited to, relevant skills, experience, and qualifications.

Amgen offers a Total Rewards Plan comprising health and welfare plans for staff and eligible dependents, financial plans with opportunities to save towards retirement or other goals, work/life balance, and career development opportunities including:

• Comprehensive employee benefits package, including a Retirement and Savings Plan with generous company contributions, group medical, dental and vision coverage, life and disability insurance, and flexible spending accounts.
• A discretionary annual bonus program, or for field sales representatives, a sales-based incentive plan
• Stock-based long-term incentives
• Award-winning time-off plans and bi-annual company-wide shutdowns
• Flexible work models, including remote work arrangements, where possible

for a career that defies imagination

Objects in your future are closer than they appear. Join us.

careers.amgen.com

Amgen does not have an application deadline for this position; we will continue accepting applications until we receive a sufficient number or select a candidate for the position.

Amgen is an Equal Opportunity employer and will consider you without regard to your race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, or disability status.

We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.