Data Protection Program Director at Emergent BioSolutions

We go where others won’t, taking on some of the biggest public health challenges to protect and enhance millions of lives, and create a better, more secure world. Here, you will join passionate professionals who advance their scientific, technical and professional skills to develop products designed-to protect and enhance life.

I.    JOB SUMMARY 

The Data Protection Program Director is responsible for the effective execution of the Emergent data classification, IT disaster recovery planning and cyber incident response management programs. This includes providing thought leadership, directing, evangelizing, and overseeing the development of the programs’ roadmap and creation of and reporting on metrics for roadmap milestones, including the implementation of controls, development of metrics, and planning, driving, and ensuring completion of key activities within these programs. The scope of responsibility is global, enterprise-wide and will span all areas of the programs and initiatives.

II.    ESSENTIAL FUNCTIONS
Reasonable accommodations will be made to enable individuals with disabilities to perform the essential functions.
The essential job functions and primary responsibilities of the Data Protection Program Director will include, but are not limited to the following, as a direct report to the Chief Information Security Officer:

Data Classification Program
•    Leads and directs business stakeholders to establish schedule, budget, and assure quality of all program elements. 
•    Keeps close, direct contact with IT and other stakeholders and business partners to ensure that activities deliver the expected outcomes and contribute to strategic decisions and milestones on the data classification roadmap.
•    Acts as the communications conduit to stakeholders and the information security working group; conducts periodic briefings and status update presentations, as needed.
•    Leads risk assessment and audit activities related to the program initiatives and maintains documentation of all assessment and audit findings, together with metrics for initiatives and roadmap milestones.

Disaster Recovery Program
•    Provide thought leadership, subject matter expertise and directs the development of comprehensive business continuity plans and technology recovery plans for each functional area.
•    Lead cross-functional team to conduct and perform business impact analysis and risk assessments throughout the enterprise. 
•    Lead the development and implementation of standards, procedures in support of the disaster recovery program and meeting regulatory and clients’ requirements. 
•    Act as the Disaster Recovery subject matter expert across all Emergent environments including the development of new features and services. 
•    Develop an in-depth understanding of business processes, technology assets, and interdependencies of the organization.
•    Lead the organization to design, organize, conduct, and document tabletop exercise and drills with the goal of driving changes in our Disaster Recovery preparedness. 
•    Lead and support Emergent leadership team in the coordination and execution of the plans in response to any business interruption.
eDiscovery Program
•    Management of case data, recording and logging of findings in online case management tool
•    Collaboration with Legal, Business Conduct, Human Resources, Global Security and other Emergent partners on data collection and data analysis to meet eDiscovery or legal inquiry objectives
•    Provide written reports to senior management
•    Embrace continuous development in support of investigation/eDiscovery new or evolving technologies and processes
•    Seek out ways to improve SOPs in emerging technology environment
•    Demonstrate flexibility to accommodate a dynamic work environment
•    Support and improve procedures regarding chain of custody practices

Cyber Incident Response Program
•    Lead and collaborate with IT, OT, Legal, HR, Ethic& Compliance, and other internal and external resources to ensure security incident response processes and tools are in place to manage security incidents and to meet business objectives and regulatory requirements 
•    Provide training and awareness for security incident management including tabletop, scenario-based and live testing exercises 
•    Lead investigation of security incidents from confirmation of the incident to resolution and capturing lessons learned 
•    Coordinate with technical teams and third-party vendors to triage and contain threats and quickly mitigate damages
The above statements are intended to describe the nature of work performed by those in this job and are not an exhaustive list of all duties. Nothing in this job description restricts managements right to assign or reassign duties and responsibilities to this job at any time which reflects management’s assignment of essential functions. 

III. MINIMUM EDUCATION, EXPERIENCE, SKILLS

Education: 
•    A bachelor’s degree in Computer Science or a related discipline.
•    CISSP, CISA, CDRP, CBCP or comparable experiences

Experience: 
•    Minimum 8 - 15 years’ experience working in an information security technical role
•    Exposure to Microsoft Azure Information Protection (AIP) / Windows Information Protection (WIP) suite within an enterprise
•    Experience working with unstructured data, metadata, emails headers, data labeling, and classification
•    Hands on experience with industry leading Data Classification, Disaster Recovery, and Incident Response products / suites
Knowledge: 
•    Moderate experience with cloud computing
•    Moderate experience with Data Loss Prevention suites
•    Strong understanding of general security and networking concepts and experience applying same in corporate network environments
•    Ability to troubleshoot incidents until root cause resolutions.
•    Strong oral and written communication skills and ability to transform technical knowledge into business language (e.g., reports, presentations, etc.)
•    Experience in root cause analysis, industry benchmarking, survey evaluation and data interpretation is required.
•    Have the ability to apply logic and reason to solve complex problems.
•    Ability to establish and maintain multi-functional and positive working relationships.
•    Advanced computer skills and proficiency. Knowledge in computer software and hardware
•    Strong interpersonal and networking skills with a solid ability to work in a team environment.
•    Ability to work under stressful and tight deadlines as well as the ability to lead in a fast-paced environment.
•    Ability to multi-task, discerns patterns in detail.
•    Think through problems for logical solutions and remain calm and professional under stress.
•    Strong decision-making ability during both crisis and non-crisis situations.
•    Able to work with highly confidential information.
•    Ability to collaborate effectively with peers/stakeholders across all levels and functions 

Abilities: 
•    Collaborate with project management, technology, and business application owners for the integration of applications and users into the Emergent BioSolutions Identity Management system
•    Ability to communicate with technical and non-technical stakeholders across multiple business units

#LI-Remote

Per CDC guidelines, Emergent strongly recommends that all employees working on site are vaccinated to help ensure their safety, as well as the safety of fellow employees. This includes the use of good judgment when determining when the CDC guidelines advise that you stay home when ill. 

There are physical/mental demands and work environment characteristics that must be met by an individual to successfully perform the essential functions of the job. This information is available upon request from the candidate.

Reasonable accommodations may be made to enable individuals with disabilities to perform all essential functions.
 

Emergent BioSolutions is an Equal Opportunity/Affirmative Action Employer and values the diversity of our workforce.  Emergent does not discriminate on the basis of race, color, creed, religion, sex or gender (including pregnancy, childbirth, and related medical conditions), gender identity or gender expression (including transgender status), sexual orientation, age, national origin, ancestry, citizenship status, marital status, physical or mental disability, military service or veteran status, genetic information or any other characteristics protected by applicable federal, state or local law.
 

Information submitted will be used by Emergent BioSolutions for activities related to your prospective employment. Emergent BioSolutions respects your privacy and any use of the information submitted will be subject to the terms of our Privacy Policy .
 

Emergent BioSolutions does not accept non-solicited resumes or candidate submittals from search/recruiting agencies not already on Emergent BioSolutions’ approved agency list. Unsolicited resumes or candidate information submitted to Emergent BioSolutions by search/recruiting agencies not already on Emergent BioSolutions’ approved agency list shall become the property of Emergent BioSolutions and if the candidate is subsequently hired by Emergent BioSolutions, Emergent BioSolutions shall not owe any fee to the submitting agency.