Job Description

REQUIRED SKILLS:

• Minimum 5 years relevant experience (may include IT auditing, consulting, risk management, and/or other relevant disciplines)
• Experience with Big 4 firms or large international companies considered a plus
• Bachelor’s degree in business, information systems, or other relevant field
• Professional certification preferred (e.g., CISA, CISM, CISSP, or CRISC)
• Proficiency in IT risk management and internal control concepts and processes
• Knowledge of IT and cybersecurity process and control frameworks (ITIL, COBIT, NIST)
• Excellent written and verbal communication skills
• Excellent organizational and project management skills
• Self-motivated, ability to operate independently to deliver on assignments
• Ability to interact independently with employees at all levels of the organization
  Additional Information
  This is hybrid role eligible for off campus. after 3 months of onboarding. Please note that this role requires a candidate to be a holder of work permit & residency in Poland.

“Diversity is key for the survival of our ecosystem. I believe it is the single most important factor for a balanced flourishing environment where everyone thrives.”

• Guy Hadari – Chief Information Officer- Biogen

ABOUT THIS ROLE:

Biogen’s IT Risk Management (ITRM) function sits within the Cybersecurity organization and leads IT’s efforts to identify and mitigate risks to the confidentiality, integrity, and availability of Biogen’s systems and data. The IT Risk Manager will report to the Head of IT Risk & Cyber Portfolio Management and will lead or support activities, as assigned, in the following areas:

WHAT YOU’LL DO:

• Identify and assess risks to the Company’s systems and data
• Develop cybersecurity policies, standards, and procedures
• Benchmark Biogen’s security controls against best practices (NIST)
• Ensure compliance with Sarbanes Oxley (SOX) IT control requirements
• Ensure compliance with cybersecurity regulations (EU NIS2, China MLPS)
• Support internal audits of IT controls and completion of remediation plans
• Conduct screenings of Biogen’s vendors to identify cybersecurity risks
• Verify contracts with vendors include appropriate cybersecurity protections
• Perform Service Organization Control (SOC) reviews for critical cloud systems
• Respond to business partner inquiries regarding Biogen’s cybersecurity program
• Support Cybersecurity’s procurement and financial management processes
  Qualifications