Regional Information Risk Assurance Lead

Job Description

By clicking the “Apply” button, I understand that my employment application process with Takeda will commence and that the information I provide in my application will be processed in line with Takeda’s Privacy Notice and Terms of Use. I further attest that all information I submit in my employment application is true to the best of my knowledge.

Job DescriptionRegional Information Risk Assurance Lead

The Future Begins Here

At Takeda, we are creating a future-ready organization that uses data and digital to meet the needs of patients, our people, and the planet. We need your help to make this happen. Join our new Innovation Capability Center (ICC) in Bratislava, Slovakia.

In this role at our state-of-the-art center, you will have the opportunity to grow your skills and create solutions that will benefit patients around the world. Become the heart of our internal innovation engine.

At Takeda we unite in diversity

Takeda is committed to creating an inclusive workplace, where individuals are recognized for the diverse backgrounds and abilities they bring to our company. We are continually improving workplace experience and accessibility for everyone, and welcome applications from all qualified candidates. Here, you will feel welcomed, respected, and valued as an important contributor to our Team.

The Opportunity

As Regional Information Risk Assurance Lead you will be leading and executing control assessment activities to identify control effectiveness, maturity and areas for improvements within region. You will execute the full lifecycle of information security and data privacy third-party risk assessments as needed, either individually or through available resources, within the region.

Responsibilities

• Lead and mature the third-party risk management process framework for security and privacy risk, including necessary standards, procedures, and technologies
• Provide leadership to internal third-party relationship owners or third-party representatives in their efforts to provide responses to the security and privacy risk assessment questionnaire.
• Effectively translate third-party responses to assessment questionnaire, using sound judgement, into concise risk exposure reporting for delivery to internal stakeholders
• Partner with internal third-party relationship owners and third-party representatives to recommend necessary security and privacy controls to effectively mitigate risks to Takeda
• Ensure robust tracking and remediation of third-party security and privacy risk exposures identified through assessment processes
• Evangelize third-party risk management processes across business lines to help influence a strong culture of proactive awareness for third-party risks
• Provide any necessary training and awareness related to the third-party security and privacy risk assessment process
• Contribute to the gathering and distribution of periodic program metrics and/or dashboards
• Provide insights on other security risk management matters, as necessary, in collaboration with the broader Information Risk Management and Compliance teams.
• Assists the Head of Risk & Control Assurance with global risk and control assurance activities and regional execution
• Operates autonomously in the execution of the third-party security risk program framework within the region.
• Serves as central point-of-contact for evaluating security risks associated with all third-party engagements within the region.
• Recommends and agrees with Line Manager the need for shifts in program strategy.
• Developing strong relationships with leaders of complementary programs (e.g. Business Stakeholders, Procurement, Legal, Ethics & Compliance) to ensure harmonization.
• Mentor and train new risk assessors and risk coordinators

Requirements

• 8+ years of proven experience in information security and/or third-party risk management
• Experience leading a team of risk analysts
• Demonstrated experience understanding of security principles, IT security controls, and related technologies and products
• Strong verbal/written communication, with ability to effectively interact with professionals at all levels and to translate complex risk matters into concise messaging
• Experience in evaluating third-parties for the presence of fundamental information security and data privacy controls.
• Experience conducting risk assessments and applying concepts of inherent and residual risk to draw appropriate conclusions and articulate the same to non-technical audiences.
• Ability to effectively negotiate appropriate remediation of security gaps with third party representatives to ensure protection of Takeda information.
• Ability to effectively manage conflicting priorities in alignment with overall business and departmental strategies.
• Capable of effectively managing shifting priorities
• Excellent communication, interpersonal, presentation and organizational skills
• Experience effectively operating in and navigating a global organization with teams located across geographies
• Able to prioritize, delegate, and foster the development of high-performance teams to lead/support an environment driven by customer service and team work.
• CISSP or CISM certification would be plus

What Takeda Can Offer You

At Takeda, you may build your career, while contributing to better people’s lives. Expect trust driven culture built around Integrity, Fairness, Honesty and Perseverance. Joining ICC will give you access to high end technology, training and colleagues who will support your growth.

Salary

As a motivated employee, you should be compensated appropriately. The minimum salary for this position is € 4450 per month (full time), but your final remuneration package may be higher depending on your qualifications and experience.

Benefits

Here are a few benefits our employees are enjoying at Takeda. To get a full picture of what we are offering, follow this link.

• Cafeteria
• Medical - High standard medical care
• Bridge days
• Summer Hours
• Multisport Card

Your application and any and all conversations that occur with the recruiter, HR, and the hiring manager as part of that application will be treated in the strictest confidence.

#LI-Hybrid

Locations

Worker Type

Worker Sub-Type

Time Type