Manager, it vendor third party risk assessmentCardinal Health

The primary responsibility of this role is to collaborate with a variety of business units and teams within IT to help manage IT third party vendor risks and related vendor contracting. This is a high-visibility position as we continue to build and roll-out these capabilities across the enterprise.
In this position, the individual will be responsible for guiding the ongoing assessment of Cardinal Health's existing third party vendors. This includes:
Leading a team of 5 to 7 resources
Prioritizing existing third party vendors to determine ongoing assessment requirements
Executing ongoing assessment work for global vendors in AsiaPac, EMEA and the Americas
Individual is expected to work autonomously, escalating issues as they are encountered. Ability to effectively work in a variety of challenging environments is critical in achieving success for the role. Individual will work with local and global leaders to lead the ongoing IT third party vendor assessment program.
Daily Responsibilities:
This role is a senior position within the team and will work with various IT and business teams, and all members of the Information Security team, to identify and prioritize security related risks and help drive mitigation.
Additional responsibilities include:
Develop and implement an ongoing IT third party risk assessment program
Identify and remediate legacy third party risks
Perform reviews of vendor contracts to ensure appropriate security language is included in them
Develop effective relationships within the business and IT in support of the above responsibilities
Effectively communicate identified gaps and planned remediation procedures to leadership
Understand when issues need to be escalated and/or communicated to Cardinal Health leadership
Identify, establish and report on key metrics evaluating team efficiency and effectiveness
Qualifications:
Experience leading a team
Prior IT third party risk management program experience is a must
Strong, hands-on operations background, as well as a comprehensive understanding of information security
Certifications such as Certified Information Security Professional (CISSP) or Certified Information Security Manager (CISM) a plus
Knowledge of core IT security concepts required
Cardinal Health supports an inclusive workplace that values diversity of thought, experience and background. We celebrate the power of our differences to create better solutions for our customers by ensuring employees can be their authentic selves each day. Cardinal Health is an Equal Opportunity/Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, ancestry, age, physical or mental disability, sex, sexual orientation, gender identity/expression, pregnancy, veteran status, marital status, creed, status with regard to public assistance, genetic status or any other status protected by federal, state or local law.
To read and review this privacy notice click
Cardinal Health

Taguig City, Metro Manila
Permanent
Full-time