Bausch Health
Senior Data Security Specialist (4402)Career Opportunities: Senior Data Security Specialist (4402)Requisition ID 4402
– Posted
– Central
– IT
– US
– Bridgewater, NJ
– City (7)Bausch Health Companies Inc.
(NYSE/TSX: BHC) is a global company that develops, manufactures and markets a range of pharmaceutical, medical device and over-the-counter products, primarily in the therapeutic areas of eye health, gastroenterology and dermatology.
We are delivering on our commitments as we build an innovative company dedicated to advancing global health.
Each day, Bausch Health products are used by over 150 million people around the world.Our approximately 21,000 employees are united around our mission of improving people’s lives with our health care products, and we manufacture and market health care products directly or indirectly in approximately 100 countries.Senior Data Security Specialist
– Rochester NY or Bridgewater NJAs a Senior Data Security Specialist, you will help secure Bausch Health data against both insider and outsider threats.
You will help manage our state-of-the-art security tools to correlate threats, respond to incidents, and protect our global assets.
Additionally, you’ll work collaboratively with other members of our Global Security team to investigate incidents, analyze attack methods, research new defense techniques and tools, develop security policy, and document procedures for the Global Security Operations Center.Responsibilities Develop strong working relationships with support teams, management, and cross functional working groups.
You will leverage advanced information security, operations, cyber defense, and incident response experience to drive change and transformation within the Global Security Team.
Security lead for projects in Data Security, Data Classification, and Data Loss Prevention.
Management of information protection and Data Loss Prevention tools and techniques.
Interact with Data Privacy and Compliance departments as it relates to data security.
Conduct computer forensic analysis, data recovery, eDiscovery, and any other IT investigative work.
Learn new cyber defense tools, techniques, policies, and procedures relative to the changing threat environment.
Performs incident response activities and ensure that proper protection or corrective measures have been taken when an incident has been discovered.
Perform trend and root cause analysis.
As a member of the Security Incident Response Team (SIRT), respond to threats by working with the 24x7x365 Security Operations Center (SOC) and Security working teams to support security monitoring, protection, and delivery of security services for the organization.
Responsible for assessing systems, processes, and projects against compliance requirements, control objectives, and security best practices; interacts with internal and external technical staff and consults with project teams at various stages of project cycles.
Provide appropriate inputs to the problem management process while supporting other team members in processes and techniques used to manage significant incidents.
Follows security operations playbooks Report status on activities, issues, projects, etc.
to senior staff/management, including the effectiveness and efficiency of security activities.
Propose new standards, tools, policies, and procedures to improve security, compliance and risk management activities based on security operations findings, or security events or incidents.
Collaborate with IT teams and security colleagues to ensure audit readiness, and to prepare for internal and external audits.Qualifications/Skills Minimum five years as a data security engineer and/or data security analyst.
Hands-on experience with Microsoft Advanced Information Protection, Microsoft Data Loss Prevention, and Microsoft Cloud App Security technologies.
Experience inbuilding security processes, run books and documenting important security tasks.
Must be able to maintain data confidentiality and compliance with regulatory requirements (HIPAA, FERPA, PCI, etc.).
Ability to quickly and effectively investigate security incidents, perform root cause analysis, and document findings.
Understanding of cyber-security principles such as encryption, ports, protocols & services, policies, procedures, physical security, risk management, configuration management, ethics, access control, security architecture, continuity of operations, contingency planning, application security, etc.
Advanced understanding of the information security threat landscape.
Should be up to date on current attacker tools, techniques, and procedures.
Understanding of existing and emerging technologies.
Experience of being a member of Security Incident Response teamsEducation and Experience Bachelor’s Degree in Information Technology, Computer Science, Security or equivalent educational or professional experience and/or qualifications.
Security certifications such as CISSP, CISM, GIAC, CEH, Security or equivalent certifications a plus.This position may be available in the following location(s): US
– Bridgewater, NJAll qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status.Job Applicants should be aware of job offer scams perpetrated through the use of the Internet and social media platformsBausch Health is an EEO/AA employer M/F/D/V.