Associate Director Compliance & Risk Management

Merck Sharp & Dohme Corp., a wholly-owned subsidiary of Merck & Co. Inc., is looking for an Associate Director, Compliance & Risk Management for its Branchburg, NJ location to determine the cyber risk posed to Merck Technology Assets, Business Process and Third parties, including geopolitical concerns, cyber threats, vulnerabilities & adversaries.
Can telecommute from anywhere in the U.S. within the following framework: must work onsite at Branchburg, NJ office location at least 50% of the time.
Must have MS in Computer Information & System Security, Computer Science, or closely related & 10 years computer science experience.

Experience must include 4 yrs in Information Risk & Security & some experience with the following: Network Security, Application Security, Database Security & Cloud Security, End Point Security & Identity & Access management; security Technologies such as PKI, Firewalls, Penetration testing software & use, Privileged access mgmt & Data Encryption; using 3rd-party tools & cyber intelligence gathering source; conducting cyber risk assessments for applications, business process, innovative technologies & 3rd parties utilizing risk-based approaches including control assessments, Risk Advisory Boards, Threat Models & Kill chains; mitigating risk through deployment of tech & procedural controls; cyber Incident, Threat & Vulnerability Mgmt; security Incident Response; MITRE ATT&CK framework; NIST Cyber Framework; ISO 2700; systems development methodologies, including Agile and Scrum; assessing cyber risk across networks, operating systems, applications, databases & other information system technologies; Governance Risk & Compliance platforms & solutions, including Archer & hands-on experience completing Information Risk/Security Assessments; & leadership experience across globally located teams in a matrix environment.

Must have Advanced Security Certifications- CISSP, CEH.
Will also accept BS and 12 yrs required experience.