ABOUT ASTRAZENECA

AstraZeneca (AZ) are a global, science-led biopharmaceutical business whose innovative medicines are used by hundreds of millions of patients worldwide. Our IT 2025 strategy is focused on Smarter, Faster, Leaner and Better and we’re looking for a Cyber Security Process Improvement and Compliance Manager to play an active part in helping make this strategy a reality.

AZ’s IT capability is world-class. As an IT capability, we:

• Believe in Lifelong Learning
• Endeavour to be a great place to work
• Actively encourage a “Speak Up” culture
• Lead the way in Sustainable IT & Social Impact
• Are actively working towards becoming a digital organisation.

Essential skills and experience

• Significant experience in cyber security, ideally in a “front-office” role, interacting with key internal and external stakeholders
• A relevant degree and/or recognized professional certifications such as CRISC, CISM, CISSP etc
• Experience of security assurance and risk management, in complex, multinational, corporate environments
• Proven track record of working with senior stakeholders to deliver positive outcomes in the security posture
• A good awareness of IT architecture, design, configuration, and implementation.
• Recognising opportunities for organisational improvement and driving that change through via collaboration, drive and diligence
• Ability to analyse complex situations, assessing risks and balancing strategic and tactical security requirements
• Ability to work well in diverse, multinational teams and proven ability to influence others to achieve positive outcomes
• Willing to learn and able to manage ambiguity and operate effectively with little supervision.
• Outstanding communication skills and capable of generating excellent documentation which requires minimal rework
• Self-starter with high levels of drive, energy, resilience and a desire for professional excellence
• Skilled in cyber security with the ability to understand the range of controls within typical security frameworks (NIST CSF, ISO27001)

We’re looking for an IT security professional that can help us on the journey through this challenging and ever-changing technology landscape. We need an individual who:

• Understands that security is a journey and not a destination. Cyber Security is not something that can be “fixed”, and we instead need to focus on innovation to maintain sustainable risk position against the evolving threat landscape
• Understands that we can’t just buy our way out of a Cyber Security problem. Technology may win the battle, but it won’t win the war
• Understands that Cyber Security is not just dealing with individual hackers. We are potentially working against state-sponsored attacks and multi-billion $ organised crime syndicates
• Understands attackers, their motivations and their ways of working to be able to get ahead and keep ahead of them.

As part of this world-class capability, we need a Cyber Security Process Improvement and Compliance Manager to support the AZ Cyber Security Compliance team to ensure that AZ’s information assets are adequately protected in relation to confidentiality, integrity and availability. The role will specifically drive cyber security process improvements, whilst also ensuring that AZ continues to operate a clear, business-connected IT Security Policy Framework and associated controls to identify any risks and support risk remediation processes to improve the security of AZ processes.
The role is also required to work closely with internal teams across all lines of business and the wider enterprise, to determine new security assurance opportunities, to communicate clearly and effectively with AZ’s global customers and suppliers and work collaboratively with other IT functions and AZ business areas.

Essential skills and experience

• Significant experience in cyber security, ideally in a “front-office” role, interacting with key internal and external stakeholders
• A relevant degree and/or recognized professional certifications such as CRISC, CISM, CISSP etc
• Experience of security assurance and risk management, in complex, multinational, corporate environments
• Proven track record of working with senior stakeholders to deliver positive outcomes in the security posture
• A good awareness of IT architecture, design, configuration, and implementation.
• Recognising opportunities for organisational improvement and driving that change through via collaboration, drive and diligence
• Ability to analyse complex situations, assessing risks and balancing strategic and tactical security requirements
• Ability to work well in diverse, multinational teams and proven ability to influence others to achieve positive outcomes
• Willing to learn and able to manage ambiguity and operate effectively with little supervision.
• Outstanding communication skills and capable of generating excellent documentation which requires minimal rework
• Self-starter with high levels of drive, energy, resilience and a desire for professional excellence
• Skilled in cyber security with the ability to understand the range of controls within typical security frameworks (NIST CSF, ISO27001).

When we put unexpected teams in the same room, we unleash bold thinking with the power to inspire life-changing medicines. In-person working gives us the platform we need to connect, work at pace and challenge perceptions. That’s why we work, on average, a minimum of three days per week from the office. But that doesn’t mean we’re not flexible. We balance the expectation of being in the office while respecting individual flexibility. Join us in our unique and ambitious world.