Assists in the identification, analysis, resolution and monitoring of compliance issues.
Reviews and approves change tickets for infrastructure compliance
Identifies and reports findings, trends, problems, and activities that may indicate a need for change in policies, procedures, internal controls, or training.
Performs information security risk assessments on third party vendors and external business partners in coordination with Third Party Risk Program
Reviews and manages policy exceptions through the process
Tracks and monitors risk remediation action plans
Interpret and analyze third party security risk assessment results, report findings to business owners, and provide recommendations for remediation.
Work with business owners to coordinate and oversee the management of issues stemming from third party security risk assessments.
Collaborate with internal partners to document risks, issues and mitigation plans.
Supports data security program.
Other projects as assigned.
Requirements
Qualifications Required
Bachelor's degree
3+ years of IT, Security, or GRC experience in a position related to this role (e.g., information security, compliance, audit, risk, etc.)
1+ year of experience performing security risk assessments (including AI components a plus)
Knowledge and understanding of information security best practices
Experience with regulatory compliance and / or information security management frameworks
Familiarity of domestic and global regulations related to data privacy and security
Familiarity of the data management aspects of the product development life cycle, architecture, data handling and asset classification
Strong investigative, analytical, and problem-solving skills
Organized self-starter; versatile and capable of working with minimal management oversight.
Preferred
Relevant certifications such as Certified Information Systems Auditor (CISA)
Knowledge of GRC tools and solutions.
One Trust experience a plus
Working Environment
At Astellas we recognize the importance of work / life balance, and we are proud to offer a hybrid working solution allowing time to connect with colleagues at the office with the flexibility to also work from home. We believe this will optimize the most productive work environment for all employees to succeed and deliver. Hybrid work from certain locations may be permitted in accordance with Astellas’ Responsible Flexibility Guidelines.