Specialist IS Security Engineer

Amgen is searching for a Specialist IS Security Engineer who will report to the Director Information Security and will be based in Tampa, FL, at Amgen’s new Capability Center. At Amgen, our mission is simple: to serve patients. Our new Tampa Capability Center provides essential services that enable us to better pursue this mission. This state-of-the art center serves as a base for finance, information systems, and human resources professionals to make a meaningful impact at one of the world’s leading biotechnology companies.

The IS CARE Risk, Governance & Compliance Security Engineer (CSE) plays a leadership role in Information Security for Amgen. The primary responsibility is to support compliance with Information Security Policies, Standards and government regulations such as medical device security requirements, SOX, GxP, PII, and EU directives. The IS CSE will work with various stakeholders at Amgen to define and implement strategies for reporting and monitoring security controls, and adherence to procedures and requirements.

The Risk & Compliance is part of Amgen’s Cybersecurity, Risk, Architecture and Engineering team. The team is expected to contribute to and help deliver services in other areas of information security and control monitoring.

Job Responsibilities

The IS CSE will be part of the Information Security team responsible for delivering security compliance services across Amgen globally focusing on compliance with Information Security policies, standards and applicable government regulations. Areas of responsibility include:
Provide subject matter expertise in the areas of information risk management, security controls, and compliance
Understand the complex technologies that comprise Amgen’s computing environment, identifying, documenting and helping to manage the information protection implications
Perform and coordinate the monitoring and testing activities to demonstrate compliance with policies, standards, and procedures, and with applicable regulations
Review evidence and help to analyze and explain evidence to auditors and management when needed
Be a liaison between system owners and auditors during negotiations process
Provide guidance to the staff and contract teams supporting security operations and risk management activities on security compliance processes, strategies and approaches
Define requirements, perform product evaluations and make recommendations on compliance tools and procedures
Evaluate and monitor solutions and service providers for adherence to Amgen’s Information Security policies, standards and applicable government regulations
Advise project teams and application owners on information security controls
Maintain and build relationships with the Information Security Client teams with a focus on ensuring inclusion of information security controls and strategy on projects and operations
Provide mentorship throughout Amgen on technical subjects in your technical domain
Appropriate escalation of problems and issues to management
Participate in proactive research and provide recommendations for continuous improvement
Highly motivated and able to work effectively under minimal supervision
Team-oriented, placing priority on the successful completion of team goals

IS CSE will also present security control status reports to senior management, adhere to policies and practices relative to technical guidelines and change management processes, and may contribute to the development of new policies and practices by suggesting innovative ideas. Additional responsibilities include understanding complex technologies that impact Amgen’s network and security; recognizing and documenting security implications. The IS CSE will also be responsible for demonstrating experience with technical documentation as it relates to the delivery of information security services in a regulated environment.


Basic Qualifications

Doctorate degree
OR
Master’s degree and 3 years of Information Systems Security experience
OR
Bachelor’s degree and 5 years of Information Systems Security experience
OR
Associate’s degree and 10 years of Information Systems Security experience
OR
High school diploma / GED and 12 years of Information Systems Security experience


Preferred Qualifications
5+ years’ experience supporting compliance-related services
Master’s degree in Engineering, Information Systems, Computer Science
5+ years as a security engineer supporting a multinational organization
CISSP, CISA Security or equivalent security-related industry certifications
Excellent analytical and troubleshooting skills
Experience with Information Security standards and policies
Demonstrated success in leading multi-functional initiatives without formal authority
Strong influencing and negotiating skills
Effective working with virtual teams
Experience with regulations (GxP, SOX, PII, Privacy, EU Directives) in the pharmaceutical/biotechnology industry is a plus
Biotechnology, pharmaceutical, or healthcare experience
Excellent verbal and written communication skills
Successful management of multiple priorities
Self-starter with a high degree of initiative

Amgen is committed to unlocking the potential of biology for patients suffering from serious illnesses by discovering, developing, manufacturing and delivering innovative human therapeutics. This approach begins by using tools like advanced human genetics to unravel the complexities of disease and understand the fundamentals of human biology.

Amgen focuses on areas of high unmet medical need and leverages its expertise to strive for solutions that improve health outcomes and dramatically improve people’s lives. A biotechnology pioneer since 1980, Amgen has grown to be one of the world’s leading independent biotechnology companies, has reached millions of patients around the world and is developing a pipeline of medicines with breakaway potential.

The invaluable contributions of our talented Tampa team will help us develop the vital and innovative medicines that treat serious illness and unmet medical needs around the globe.

Amgen is an Equal Opportunity employer and will consider all qualified applicants for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, or disability status.