APPLICATION SECURITY ANALYST

Role:Application security analyst

Location: Remote, but prefer someone in the NJ location but open to work EST hours Duration: 12 months extendable

Must haves: Large Scale Information security, compliance/audit, SAP OR ERP Experience. Nice to have: labs experience.

As a Security Quality & Compliance consultant, you will work within the Information Security and risk Management department, joining the team responsible for security consulting initiatives of Supply Chain, Make and Deliver Platforms related application support. In this role, you will be responsible for security & controls throughout global projects related to Supply Chain applications including SAP S/4HANA Business Transformation, and continuous collaboration and follow-ups with the business partners.

Minimum Qualifications

• • Bachelor’s Degree in Information Technology, Computer Science, or a related field

• • Minimum 7 years of experience working with security and controls, consulting stakeholders throughout the application implementation process

• • Broad knowledge of information security processes and principles is useful in explaining the business value of cybersecurity.

• • Experienced in identifying and articulating issues/obstacles regarding application security issues

• • Working knowledge of SAP business processes

• • Familiarity with SOX compliance requirements

• • Self-starter and proficient multitasker with excellent documentation, communication, and organizational skills

• Preferred Knowledge, Skills and Abilities

• • Certified Information Systems Security Professional (CISSP), CISM, CISA etc..

• • Responsible for advancing cybersecurity of our Pharma systems, applications, and integrations across product lines and regions by identifying key risks and controls

• • Orchestrate and deliver cybersecurity risk assessments of Supply Chain projects, applications, and the technologies that run them while maintaining awareness of the changing threat landscape

• • Understand and promote risk management activities associated with external regulations and internal Johnson & Johnson policies such as IAPP, GxP, and GDPR

• • Bridge the gap between traditional Information Technology (IT) and business functions by relating cyber threats and vulnerabilities to business imperatives and communicating them to key business leaders

• • Actively advise, assess, and lead Business and IT stakeholders in the development of secure information systems and solutions in line with the organization’s cybersecurity architecture, IAPP policies, and regulatory requirements.

• • We maintain connections across peer groups to continuously understand emerging security solutions that are ground-breaking enablers for mitigating supply chain risk at J&J

• • We constantly strive to shape the administrative controls for cybersecurity through advisory and assurance services

• • Support compliance assessments on regulatory (ie GxP or SOX)

• • Make recommendations for application security including change, incident management, process enhancements, access management, and change management

• • Consulting stakeholders about data classification and privacy, including data encryption and protection

• • Ensures appropriate controls are implemented with SAP security and coordinates alignment with Internal Audit and IT Compliance

• • Provide metrics and reports on a weekly basis tracking the entire portfolio, application assessment status, and Risk Acceptance status

Thanks and Regards Ramyasree US IT RECRUITER Thought wave Software and Solutions 314 N. Lake St, Suite 6, Aurora IL 60506 Desk: 6302164696 Email:ramyasree@thoughtwavesoft.com LinkedIn: https://www.linkedin.com/in/ramya-sree-kolla-519839221/

A Certified Minority Business Enterprise, Disadvantaged Business Enterprise, SAM.gov, SOC2 & ISO2005, Vendors for: · STATES: IL, PA, TN, AK, OR, CT, GA, VA, ID, IA, UT, FL, MN & CO, · NATIONAL LABS: ARGONNE & FERMI, · COUNTIES: HENNEPIN, MN, FULTON & GA, · PUBLIC SCHOOLS: ATLANTA.