Job Description

Roche fosters diversity, equity and inclusion, representing the communities we serve. When dealing with healthcare on a global scale, diversity is an essential ingredient to success. We believe that inclusion is key to understanding people\'s varied healthcare needs. Together, we embrace individuality and share a passion for exceptional care. Join Roche, where every voice matters. The Position IT Risk & Audit Specialist A healthier future. It\'s what drives us to innovate. To continuously advance science and ensure everyone has access to the healthcare they need today and for generations to come. Creating a world where we all have more time with the people we love. That\'s what makes us Roche. The team: We are the global product security and privacy center of Roche Diagnostics worldwide. Our vision: To build a solid Global Product Security and Privacy Operations function, provide strategic security insight across Roche Diagnostics to ensure our devices are what our regulators require and our patients deserve Our priorities: Understanding our customers and Stakeholder needs to deliver effective security on testing solutions Develop an agile and sustainable operating business model to deploy security concepts that enable confident healthcare decisions. Institutionalize security role models to provide guidance, education and awareness to maximize the security of Roche Diagnostics solutions and create trust along the patients journeys Data security and privacy are key success factors in our digital transformation and essential to reach our ambitions. You are inspired to contribute to the overall Roche Diagnostics vision by applying end-to-end Division-wide product security and privacy operations to keep our products and services secure and privacy compliant throughout the entire lifecycle. You believe in the potential of science, technology, data and insights to improve the standard of care for humankind and you are eager to help navigate through unchartered territory to lift this potential. As an IT Risk & Audit Specialist , you are responsible for the ongoing development, implementation and management of information security policies, procedures and other components of the ISMS in order to maintain the confidentiality, integrity, and availability of sensitive, personal, and health information and Roche Diagnostics products and information systems where GDPR, HIPAA and other privacy and security legislation and regulations apply. Your opportunities Coordinate and manage product security and privacy compliance activities, acting as ISMS manager (or equivalent) to ensure cybersecurity certifications are achieved or maintained Create and maintain security and privacy relevant documentation in response to legal and regulatory requirements (e.g. HIPAA, GDPR, etc.), manages the documentation and related intranet repositories Prepare and deliver communication and training to educate Roche teams on the evolving compliance landscape and new or updated policies and related changes Where observed, escalate actual or potential compliance violations or other issues to relevant colleagues or management, according to local, regional and/or global policies and procedures Manage and perform activities related to preparation, execution and remediation of internal and external compliance audits Who you are Hold a Bachelor degree in informatics, life-sciences and have experience working in a regulated environment of the healthcare, diagnostics, and/or pharmaceutical industry with Information Security and Computer System Validation (CSV) is preferred Possess 6+ years related work experience in driving cybersecurity, privacy, and risk management programs in medium to large enterprise organizations Have 4 - 6 years of related experience in the healthcare, diagnostics, and / or pharmaceutical industry, preferred Hold ISO 27001 Lead Auditor, CISA, CISM, CISSP, GIAC, OSCP, SSCP or equivalent certification Have excellent knowledge of HIPAA, GDPR, and other privacy relevant legislation and regulations Have good understanding of techniques, standards and state-of-the art capabilities for authentication and authorization, applied cryptography, security vulnerabilities and remediation Have great interest in all aspects of security and privacy research and development and possesses excellent verbal and written communication skills in English Flexible and able to work in a fast-paced, rapidly growing environment (startup mentality) with globally distributed and multi-cultural teams and able to travel up to 20% (as required) Who we are At Roche, more than 100,000 people across 100 countries are pushing back the frontiers of healthcare. Working together, we\'ve become one of the world\'s leading research-focused healthcare groups. Our success is built on innovation, curiosity and diversity. Roche is an Equal Opportunity Employer.

foundit