Top Cyber Security Jobs

Lead development and lifecycle management of enterprise cybersecurity policies, standards, and control library. Establish policy governance, oversee control mapping to frameworks/regulation (NIST, ISO, CIS, NIS2), define control objectives, support audits/inspections, drive remediation and control improvements, produce governance reporting/KPIs, partner across legal, privacy, risk, and business functions, and lead/mentor governance team members to strengthen cyber risk management.

Lead day-to-day vulnerability management across on‑prem, cloud, and hybrid environments: run scans, analyze/prioritize findings, coordinate remediation with engineering and infrastructure teams, track and validate fixes, incorporate threat context, maintain metrics and compliance reporting, and drive continuous process and tooling improvements while managing and guiding vulnerability analysts.

Serve as the primary cybersecurity liaison for assigned business functions, embedding security into initiatives and technology programs. Lead risk identification, assessments, control applicability, remediation planning, and reporting. Coordinate with security, privacy, legal, and third-party teams, support audit and regulatory readiness, drive cybersecurity awareness and adoption, and improve the BISO operating model and governance processes.

Support development and maintenance of cyber resilience procedures and playbooks, assist in incident simulations and recovery tests, identify critical systems, gather data for resilience assessments, maintain audit evidence, track risks and remediation, prepare metrics and reports, and capture lessons learned from post‑incident reviews.

Lead and coordinate threat remediation across SOC, cloud, infrastructure, and engineering teams. Prioritize, track, and validate remediation actions, translate threat intelligence into actionable plans, support high‑severity incidents, report metrics and trends, drive process improvements, and escalate material risks to senior leadership.

Lead development and execution of a cyber threat intelligence program to protect pharmaceutical assets. Analyze threat actors, malware, TTPs; partner with SOC, detection engineering, incident response, and vulnerability management to inform detections, hunting, and remediation. Manage vendor and ISAC relationships, track CTI metrics, and ensure alignment with policies and regulatory requirements.

Lead digital forensic and insider-threat investigations across on-premises, cloud, and endpoint environments. Collect and analyze ESI, maintain chain of custody, use industry forensic tools and SOC platforms, produce reports, triage alerts, manage multiple investigations, perform peer reviews, and support global incident response including occasional travel and after-hours work.

Lead the AMER Response Threat Operations team to detect, investigate, contain, and remediate cyber intrusions across on-premises, cloud, and hybrid environments. Drive event correlation, attack lifecycle analysis, remediation planning, automation, metrics, and continuous improvement. Provide technical leadership in digital forensics, malware analysis, threat intelligence, and incident response while managing operations, talent development, stakeholder communication, and Agile program delivery.

Support and maintain the cybersecurity GRC program by developing policies, aligning to frameworks (NIST, ISO, COBIT), conducting risk assessments, tracking remediation actions, monitoring regulatory changes, and producing governance metrics and reports to inform leadership decisions.

Support management of cybersecurity regulatory obligations and compliance readiness. Track and map regulations to policies and controls, coordinate stakeholders, maintain compliance inventories, prepare responses and evidence, support audits, and produce status reports and metrics to ensure regulatory alignment.