Job details

Principal Cyber Security GRC Specialist

At Bayer we’re visionaries, driven to solve the world’s toughest challenges and striving for a world where 'Health for all Hunger for none’ is no longer a dream, but a real possibility. We’re doing it with energy, curiosity and sheer dedication, always learning from unique perspectives of those around us, expanding our thinking, growing our capabilities and redefining ‘impossible’. There are so many reasons to join us. If you’re hungry to build a varied and meaningful career in a community of brilliant and diverse minds to make a real difference, there’s only one choice.Principal Cyber Security GRC SpecialistYOUR TASKS AND RESPONSIBILITIESThe primary responsibilities of this role, Principal Cyber Security GRC Specialist are to:Responsible for developing, implementing, and managing cyber security Governance, Risk, and Compliance (GRC) initiatives within Bayer, measuring adherence to Bayer policies and procedures which are based on industry standards.Assessing compliance of Bayer processes, monitoring critical IT security deliverables, and providing audit support for cybersecurity teams. Also, managing IT security exceptions and recommending controls to address gaps through data and security risk assessments.• Perform risk management activities to identify, assess, and mitigate cyber security risks for Bayer;• These include owning and management of the cybersecurity framework, measuring the effectiveness of this framework and driving for the maturity and to support business needs;• Develop and maintain key performance indicators (KPIs) and metrics to measure the effectiveness of GRC initiatives;• Prepare regular reports for senior management on the status of GRC activities. Collaborate with cross-functional teams to integrate GRC principles into business processes and systems;• Provide consulting across the organization on matters of cybersecurity GRC Monitor regulatory changes and industry trends to ensure the organization remains compliant and proactive in addressing emerging risks;• Act as a liaison with external auditors, and stakeholders on GRC-related matters.WHO YOU AREBayer seeks an incumbent who possesses the following:Required Qualifications:• A Bachelor’s or Master’s degree in information technology, cybersecurity, computer science, or a related field is essential, though relevant working experience may be considered an equivalent;• Proficiency in various cybersecurity tools and software, understanding of network infrastructure and security protocols, and knowledge of threat modeling and risk assessment techniques are helpful;• Extensive experience in managing information security in a corporate or government setting is valuable, along with familiarity with information security standards and frameworks such as ISO/IEC 27001 and NIS;• Proven experience with risk management frameworks such as NIST Cybersecurity Framework or ISO 27001;• VACC Leadership Skills.Preferred Qualifications:• [7+] years of experience in cyber security, previous experience in a GRC role highly desired;• Certifications such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or Certified in Risk and Information Systems Control (CRISC) are desirable.This posting will be available for application until at least 2/28/2025.YOUR APPLICATIONBayer offers a wide variety of competitive compensation and benefits programs. If you meet the requirements of this unique opportunity, and want to impact our mission Science for a better life, we encourage you to apply now. Be part of something bigger. Be you. Be Bayer.To all recruitment agencies: Bayer does not accept unsolicited third party resumes.Bayer is an Equal Opportunity Employer/Disabled/VeteransBayer is committed to providing access and reasonable accommodations in its application process for individuals with disabilities and encourages applicants with disabilities to request any needed accommodation(s) using the contact information below.Bayer is an E-Verify Employer. It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability. Location: United States : Missouri : Creve Coeur || United States : Missouri : St. Louis || United States : New Jersey : Whippany Division: Enabling Functions Reference Code: 835910 Contact Us Email: hrop_usa@bayer.comSalary: $map.get("vacancy_salary_details"). Date posted: 12/14/2024

Bayer Glassdoor Company Review

3.9

Bayer DE&I Review

No rating

CEO of Bayer

Bill Anderson

Approve of CEO

What You Should Know About Principal Cyber Security GRC Specialist, Bayer

At Bayer, we’re on an exciting journey and searching for a Principal Cyber Security GRC Specialist to join our dynamic team in Creve Coeur, IL. If you're an innovator with a passion for cyber security and governance, you're in the right place! In this role, you'll develop, implement, and oversee cyber security Governance, Risk, and Compliance (GRC) initiatives that align with Bayer's mission of 'Health for All, Hunger for None.' You will assess and ensure compliance with Bayer's policies and industry standards while providing crucial support for our IT security teams. Your expertise in risk management will be vital as you identify, assess, and mitigate cyber security risks, while your analytical skills will be showcased in developing Key Performance Indicators to measure the effectiveness of GRC strategies. You'll also prepare insightful reports for senior management and collaborate with various teams to seamlessly integrate GRC principles across the organization. In this fast-paced and collaborative environment, you'll stay ahead of regulatory changes and industry trends, making a real impact at Bayer. Join us, and together let's redefine what’s possible in the world of cyber security!

Frequently Asked Questions (FAQs) for Principal Cyber Security GRC Specialist Role at Bayer

What are the responsibilities of a Principal Cyber Security GRC Specialist at Bayer?

As a Principal Cyber Security GRC Specialist at Bayer, you will lead the development and management of cyber security Governance, Risk, and Compliance (GRC) initiatives. This includes performing risk management activities, assessing compliance of Bayer's processes, and preparing comprehensive reports for senior management on GRC activities. You will also collaborate with cross-functional teams and serve as a liaison with external auditors on GRC-related matters.