Haleon
OT Vulnerability Management Lead (US)
Haleon, Trenton, New Jersey, United States,
Hello. We're Haleon.
A new world-leading consumer health company. Shaped by all who join us. Together, we're improving everyday health for billions of people. By growing and innovating our global portfolio of category-leading brands - including Sensodyne, Panadol, Advil, Voltaren, Theraflu, Otrivin, and Centrum - through a unique combination of deep human understanding and trusted science. What's more, we're achieving it in a company that we're in control of. In an environment that we're co-creating. And a culture that's uniquely ours. Care to join us. It isn't a question.This is an exciting time to join us and help shape the future. It's an opportunity to be part of something special.About the roleThe
OT Vulnerability Management Lead
will provide technical leadership to setup OT Vulnerability Management Program by architecting, implementing, and governing Vulnerability Management technologies, tools, and processes. The candidate should be capable of managing OT vulnerability lifecycle (from detection to closure), keeping a risk-based approach throughout the lifecycle.The best candidate will have the security-by-design mindset and yet understand the importance of building relationships with the other IT teams to convince them to patch the vulnerabilities for reducing cyber risk to the Company. The chosen candidate will work with the OT Program Manager, OT Team, and Business Stakeholders to design and implement vulnerability management for managing vulnerabilities that are associated with the technology assets in our manufacturing sites.Role ResponsibilitiesDevelop and implement OT Vulnerability Management Strategic Roadmap and Plan.
Develop and implement OT VM processes, guidelines, standards, and metrics.
Develop and implement OT vulnerability prioritization frameworks, remediation prioritization frameworks.
Lead remediation tracking meetings to explain vulnerabilities and possible remediation/mitigation solutions. Also motivate remediators to commit to remediation plans while ensuring their remediation does not negatively impact the business.
Lead zero-day/emergency-vulnerability evaluation and resolution to ensure if a particular zero-day or emergency vulnerability is impacting Haleon OT devices, assess if remediation or mitigation is possible. Also support incident response team (as needed).
Ensure OT-VM vendor is providing day-to-day support to the customer, following defined processes and procedures to detect, triage, prioritize, and report the vulnerabilities to the customer and providing accurate remediation/mitigation advice.
Basic Qualifications:Bachelor's degree in Information Technology / Information Security or equivalent experience in technology.
Minimum of 8 years of experience in a technology-related field or 4 years in OT security.
Strong technical knowledge regarding OT technologies, to evaluate and prioritize security vulnerabilities that can impact the OT technologies and to provide appropriate remediation/mitigation recommendations.
Experience in designing OT VM program, processes, procedures, standards, metrics.
Analyzing security vulnerabilities and deciding if this impacts Haleon and what should be done to remediate or mitigate it.
Finding a balance between Security and Business objectives, by creating a culture where security is a major consideration.
Preferred Qualifications:ISC2: CISSP
ISACA: CISM
Location:
This exciting opportunity is open to Hybrid in Warren, NJ or Remote within EST and CST time zones.Haleon offers a robust Total Reward package that consists of competitive pay and a comprehensive benefits program. This includes a generous 401(k) plan, tuition reimbursement, and time off programs including 6 months paid parental leave. On day one, you are eligible for benefits, including our healthcare programs where the company pays for the majority of your medical coverage for you and your family. We also offer the opportunity to receive a discretionary bonus based on the achievement of key business performance and other incentive/recognition programs as part of the offering.
The salary range for this role is:
$127,127 to $171,996 plus an 18% bonus.Care to join us. Find out what life at Haleon is really like www.haleon.com/careers/At Haleon we embrace our diverse workforce by creating an inclusive environment that celebrates our unique perspectives, generates curiosity to create unmatched understanding of each other, and promotes fair and equitable outcomes for everyone.Haleon is an Equal Opportunity Employer and, in the US, we adhere to Affirmative Action principles. This ensures that all qualified applicants will receive equal consideration for employment without regard to race, color, national origin, religion, sex, pregnancy, marital status, sexual orientation, gender identity/expression, age, disability, genetic information, military service, covered/protected veteran status or any other federal, state or local protected class.
#J-18808-Ljbffr
A new world-leading consumer health company. Shaped by all who join us. Together, we're improving everyday health for billions of people. By growing and innovating our global portfolio of category-leading brands - including Sensodyne, Panadol, Advil, Voltaren, Theraflu, Otrivin, and Centrum - through a unique combination of deep human understanding and trusted science. What's more, we're achieving it in a company that we're in control of. In an environment that we're co-creating. And a culture that's uniquely ours. Care to join us. It isn't a question.This is an exciting time to join us and help shape the future. It's an opportunity to be part of something special.About the roleThe
OT Vulnerability Management Lead
will provide technical leadership to setup OT Vulnerability Management Program by architecting, implementing, and governing Vulnerability Management technologies, tools, and processes. The candidate should be capable of managing OT vulnerability lifecycle (from detection to closure), keeping a risk-based approach throughout the lifecycle.The best candidate will have the security-by-design mindset and yet understand the importance of building relationships with the other IT teams to convince them to patch the vulnerabilities for reducing cyber risk to the Company. The chosen candidate will work with the OT Program Manager, OT Team, and Business Stakeholders to design and implement vulnerability management for managing vulnerabilities that are associated with the technology assets in our manufacturing sites.Role ResponsibilitiesDevelop and implement OT Vulnerability Management Strategic Roadmap and Plan.
Develop and implement OT VM processes, guidelines, standards, and metrics.
Develop and implement OT vulnerability prioritization frameworks, remediation prioritization frameworks.
Lead remediation tracking meetings to explain vulnerabilities and possible remediation/mitigation solutions. Also motivate remediators to commit to remediation plans while ensuring their remediation does not negatively impact the business.
Lead zero-day/emergency-vulnerability evaluation and resolution to ensure if a particular zero-day or emergency vulnerability is impacting Haleon OT devices, assess if remediation or mitigation is possible. Also support incident response team (as needed).
Ensure OT-VM vendor is providing day-to-day support to the customer, following defined processes and procedures to detect, triage, prioritize, and report the vulnerabilities to the customer and providing accurate remediation/mitigation advice.
Basic Qualifications:Bachelor's degree in Information Technology / Information Security or equivalent experience in technology.
Minimum of 8 years of experience in a technology-related field or 4 years in OT security.
Strong technical knowledge regarding OT technologies, to evaluate and prioritize security vulnerabilities that can impact the OT technologies and to provide appropriate remediation/mitigation recommendations.
Experience in designing OT VM program, processes, procedures, standards, metrics.
Analyzing security vulnerabilities and deciding if this impacts Haleon and what should be done to remediate or mitigate it.
Finding a balance between Security and Business objectives, by creating a culture where security is a major consideration.
Preferred Qualifications:ISC2: CISSP
ISACA: CISM
Location:
This exciting opportunity is open to Hybrid in Warren, NJ or Remote within EST and CST time zones.Haleon offers a robust Total Reward package that consists of competitive pay and a comprehensive benefits program. This includes a generous 401(k) plan, tuition reimbursement, and time off programs including 6 months paid parental leave. On day one, you are eligible for benefits, including our healthcare programs where the company pays for the majority of your medical coverage for you and your family. We also offer the opportunity to receive a discretionary bonus based on the achievement of key business performance and other incentive/recognition programs as part of the offering.
The salary range for this role is:
$127,127 to $171,996 plus an 18% bonus.Care to join us. Find out what life at Haleon is really like www.haleon.com/careers/At Haleon we embrace our diverse workforce by creating an inclusive environment that celebrates our unique perspectives, generates curiosity to create unmatched understanding of each other, and promotes fair and equitable outcomes for everyone.Haleon is an Equal Opportunity Employer and, in the US, we adhere to Affirmative Action principles. This ensures that all qualified applicants will receive equal consideration for employment without regard to race, color, national origin, religion, sex, pregnancy, marital status, sexual orientation, gender identity/expression, age, disability, genetic information, military service, covered/protected veteran status or any other federal, state or local protected class.
#J-18808-Ljbffr