Director, IT

Director, IT - Security Operations (7610)

Career Opportunities: Director, IT - Security Operations (7610)

Requisition ID 7610 - Posted - Management - IT - US - Bridgewater, NJ - City (38)

Bausch Health is a global company that develops, manufactures and markets a differentiated product portfolio across multiple high-growth therapeutic areas including Gastroenterology, Generics, Neurology, Ortho Dermatologics and Dentistry. We are delivering on our commitments as we build an innovative company dedicated to advancing global health. Each day, Bausch Health products are used by over 150 million people around the world.

Our approximately 7,000 employees are united around our mission of improving people’s lives with our health care products.

The Director, IT - Security Operations will lead and operate our Enterprise Security Operations Center, which includes internal employees and Managed Service Providers. This role will be accountable for ensuring our ability to efficiently and effectively detect, analyze, and respond to the organization's information security threats. As a key member of the IT Security leadership team, this role brings current knowledge and future vision to support the evolution of our core security operations and leading the improved adoption of new practices and capabilities to mature our overall cybersecurity posture.

This role is hybrid based with three days in office at our HQ location in Bridgewater, NJ.

• Develop strong working relationships with support teams, management, and cross functional working groups.
• Ensure appropriate governance over Managed Service Providers
• Provide appropriate inputs to the problem management process while supporting other team members in processes and techniques used to manage significant incidents.
• Provide oversight of the 24x7x365 Security Operations Center (SOC) and Security working teams to support security monitoring, protection, and delivery of security services for the organization.
• Own responsibility for continued/active communication and escalation channels between various teams and working groups within the organization, and with external vendors or security service providers.
• Identify SOC and Incident Response processes and standards across the organization.
• Own the critical process steps – detection, validation, containment, remediation, and communication – for security events and incidents such as malware infections, potential compromise, Distributed Denial of Service (DDoS), etc.
• Drive strategy for Security Incident and Event Management (SIEM) and oversee the effectiveness of the technology and process. Involve appropriate tuning, correlation of critical logs, connection to incident response process, and reporting of relevant metrics.
• Member of the Security Incident Response Team (SIRT) by responding to critical security incidents and leading escalation teams with response, containment and remediation.
• Provide guidance to develop, maintain and promote a set of security operations playbooks with internal IT teams and external working groups to effectively trigger and execute the security incident response process.
• Propose new standards, tools, policies and procedures to improve security, compliance and risk management activities based on security operations findings, or security events or incidents.
• Report status on activities, issues, projects, etc. to senior management, including the effectiveness and efficiency of security activities.
• Collaborate with IT teams and security colleagues to ensure audit readiness, and to prepare for internal and external audits.

Qualifications

• 10 years of experience in Security Monitoring / Incident Response.
• Experience managing and leading a Security Operations team.
• Advanced understanding of the information security threat landscape. Should be up to date on current attacker tools, techniques, and procedures.
• Ability to quickly and effectively investigate security incidents, perform root cause analysis, and document findings.
• Understanding of frameworks and standards, such as SANS Institute Critical Security Controls, ISO/IEC 27001/2, COBIT 5, NIST, OWASP, and Risk Management Frameworks, as well as Privacy Act and other rules and regulations.
• Understanding of cybersecurity principles such as encryption ports, protocols & services, policies, procedures, physical security, risk management, configuration management, ethics, access control, security architecture, continuity of operations, contingency planning, application security, network security, etc.
• Experience in penetration testing, threat intelligence and detection of incidents / network monitoring.
• Understanding of existing and emerging technologies.
• Experience of being a member of Cyber Incident Response teams (as a member and leader).

Education and Experience

• Bachelor's Degree in Information Technology, Computer Science, Security or equivalent educational or professional experience and/or qualifications.
• Security certifications such as CISSP, CISM, CEH, Security or equivalent certifications a plus.

This position may be available in the following location(s): US - Bridgewater, NJ

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status.

Job Applicants should be aware of job offer scams perpetrated through the use of the Internet and social media platforms.

.

Bausch Health is an EEO/AA employer M/F/D/V.