Key Responsibilities
- Provide business information security guidance throughout the application development and deployment lifecycle.
- Ensure the CRM platform complies with secure SDLC practices and required enterprise security controls.
- Identify application security risks, control gaps, privacy concerns, and compliance issues.
- Develop practical remediation recommendations and help project teams resolve identified findings.
- Support security assessments of applications, integrations, third-party tools, new functionality, and AI capabilities.
- Partner with Security Architecture, Data Security, Third-Party Risk Management, Governance, Privacy, and Compliance teams.
- Track security findings through remediation and closure.
- Communicate technical risks, priorities, and recommendations clearly to business and technology leadership.
- Balance cybersecurity requirements with business objectives, project timelines, and global program needs.
Required Qualifications
- Senior-level experience in business information security, application security, cybersecurity consulting, or a related field.
- Strong understanding of secure-by-design principles and security requirements across the SDLC.
- Experience assessing enterprise applications, cloud platforms, system integrations, and third-party technologies.
- Experience identifying security risks and developing actionable remediation plans.
- Knowledge of security governance, risk management, data protection, regulatory compliance, and enterprise security controls.
- Understanding of Security Architecture, Data Security, and Third-Party Risk Management.
- Ability to assess privacy and security risks associated with AI-enabled functionality.
- Strong client-facing communication and stakeholder-management skills.
- Experience working across global technology, security, compliance, and business teams.
Preferred Qualifications
- Experience supporting Salesforce implementations, ideally Salesforce Life Sciences Cloud.
- Pharmaceutical, life sciences, healthcare, or other highly regulated industry experience.
- Experience with AI governance, AI security assessments, data privacy, and responsible AI.
- Experience supporting large-scale global application-development or digital-transformation programs.
- Certifications such as CISSP, CISM, CCSP, CRISC, or Salesforce security credentials.
