Cyber Governance Expert Electronics / all genders / Part-Fulltime

Your Role:

As a member of the Cyber Security Governance, Compliance and Enablement team, you play a pivotal role within Merck Electronics (EL) Cyber Security team. Your responsibilities include tailoring corporate Cyber Security structures to Merck EL’s needs, supporting on an operational level, and ensuring constant alignment with Merck’s Corporate Cyber Security organization. Your role is crucial in protecting Merck’s EL IT and OT assets, software-based products, and applications while maintaining a robust Cyber Security posture.

Key Responsibilities:

1. Develop and maintain the Merck EL Cyber Security Governance framework with procedures and standards in line with the corporate framework considering industry standards, regulatory requirements, and best practices.
2. Consult and support business in managing their risks, issues, and events in IT and OT assets, software-based products, and applications.
3. Implement a comprehensive Cyber Security training and awareness program to promote good Cyber Security hygiene and staff behaviors.
4. Conduct Cyber Security audits and control effectiveness reviews (also with external partners) to verify and ensure that relevant Cyber Security requirements and regulatory requirements are adhered to.
5. Assess and monitor Merck’s Cyber Security suppliers and assist business in answering requests related to Merck’s EL Cyber Security organization.
6. Work closely with procurement and legal teams to incorporate Cyber Security requirements into vendor contracts and service level agreements.

Who you are:

1. Bachelor’s degree or equivalent in intelligence studies, computer science, engineering, or related field.
2. Minimum of 5 years‘ experience with a focus on Cyber Security or equivalent following industry standards and regulatory requirements (e.g. ISO27000, NIST CSF, NIS2, PCI DSS, KRITIS / B3S PHARMA).
3. Strong analytical and interpersonal communication skills, including the ability to communicate effectively and build consensus with teams across organizational lines.
4. Demonstrated experience across multiple information security domains preferred (e.g. IT, OT, IoT, and Digital Products).
5. 1 or more industry-recognized security or audit professional certifications (e.g. CISA, CISM, CISSP, CCSP).
6. Professional with a positive attitude and capable of contributing to a dynamic and team-oriented culture.
7. Excellent verbal and written communication skills in English (German is a plus).

EL-BP-ICG Cyber Governance, Compliance and Enablement

RL 3#J-18808-Ljbffr