Responsibilities:

  • Information Security/Cyber Security Risk Management: Assist in the development, implementation, and administration of the services in support of the FAIR methodology and Corporate Risk Management requirements, policies, standards. Complete risk assessments related to business opportunities and business services as required inclusive of internal and external sources for those services. Identify and track risks within the environment such that owners of those risks can appropriately decide in risk treatments. Perform and manage alignment activities for information security risks as part of the larger enterprise risk management efforts.

  • Process Ownership and Stewardship: Further develop, improve, and manage processes to address Information Security Risks and concerns identified/discovered through monitoring, testing, or audit procedures.

  • Communication: Provide effective communication between Information Security, IT Operations, external partners, and other departments and/or business units.

  • Administrative Tasks: Support for additional Information Security GRC efforts, such as improvements to, management of, guidance for selecting or using business services, tools, and processes. Enhance and maintain information security risk related policy and standards and documentation as required.

  • Maximize People: Contribute to an atmosphere of teamwork and continual learning.

  • Delivery: Ability to effectively prioritize and complete key tasks and deliverables.

  • Minimum Requirements

  • BA/BS degree or equivalent years of experience in lieu of degree

  • Prior information security, quality, risk management and/or audit experience preferred (5 years in comparable position or responsibilities) Related Certifications desired.

  • Strong learning agility.

  • Ability to influence with or without authority.

  • Experience working in a global organization with globally dispersed stakeholders.

  • Demonstrated ability to establish and leverage key internal and external cross-functional relationships to further accomplish support for compliance, risk management and governance.

  • Business Acumen: proven ability to understand the requirements of the business as they relate to information security and associated risk management efforts.

  • Understanding solution lifecycle management and associated information security/cyber risk management.

  • Communication skills including experience effectively delivering guidance/findings/directions to both technical non-technical audiences.

  • Qualified candidates must be legally authorized to be employed in the United Kingdom & Ireland. Elanco Animal Health does not anticipate providing sponsorship for employment visa status for this position.