Deputy Chief Info Security Officer - Bayer Corporation

At Bayer we’re visionaries, driven to solve the world’s toughest challenges and striving for a world where 'Health for all Hunger for none’ is no longer a dream, but a real possibility. We’re doing it with energy, curiosity and sheer dedication, always learning from unique perspectives of those around us, expanding our thinking, growing our capabilities and redefining ‘impossible’. There are so many reasons to join us. If you’re hungry to build a varied and meaningful career in a community of brilliant and diverse minds to make a real difference, there’s only one choice.

Deputy Chief Info Security Officer  

The Deputy Chief Information Security Officer (CISO) supports the CISO in developing, implementing, and managing the organization's information security program. This role encompasses a broad range of activities including policy development, security operations oversight, risk management, and ensuring compliance with relevant security standards and regulations. The DCISO plays a critical role in protecting the organization's information assets and technologies from cyber threats, aligning security initiatives with business objectives, and promoting a culture of security awareness across the organization. The Deputy CISO reports to the CISO, assuming the CISO role when necessary, and will play a crucial part in driving transformational improvements in cybersecurity processes and capabilities.

YOUR TASKS AND RESPONSBILITIES

The primary responsibilities of this role, Deputy Chief Information Security Officer, are to:

• Tasks & Outputs:
  • Input, along with CISO & CSRM LT in the development and implementation of a comprehensive cybersecurity strategy and vision that aligns with business goals and objectives, ensuring the protection of information assets;
  • Provide routine updates to Bayer’s Executive Risk Committee and Assurance Committee on identified compliance and risk topics illustrating Bayer’s progress addressing any items of note Ensure security programs comply with applicable country, federal, and state laws, regulations, and policies to reduce or eliminate risk and audit findings;
  • Assume divisional cyber responsibilities and partner with the CIO Leadership Team, ensuring accountability for the divisional cyber security strategy;
  • Accountable for oversight of the cyber security operations performance for cyber security foundations; working in alignment with ITSM and IT Incident Management;
  • Serve as the Executive Security Officer for Bayer NA, including The Climate Corporation, Pharma, and Consumer Health;
  • Collaborate with Bayer US Divisions to drive a business-aligned strategy that achieves business objectives while strengthening the security posture, empowering Bayer's current Freedom to Operate. This includes areas of access management and data governance policies, as well as ensuring the implementation of appropriate access and security controls to safeguard customer, grower, and patient data;
  • Responsible for fostering strong connections with the Legal department to uphold the relationship with the USDA;
  • Interact with the US Board and Security Committee, as well as engaging with the Senior Bayer Representative, Global Leadership Council, and Board of Management and Assurance Committee to inform them about critical risks or compliance issues;
  • Permanent member of the Divisional Chief Information Officer (CIO) Leadership Team, and other Divisional Executive boards – especially Crop Science) directly ensuring cyber security operations and license to operate at a divisional level;
  • Member of the Crop Science (legacy Monsanto) Oversight & Security Board of Directors Lead the partnership with Crop Science to maintain relationship with US Homeland Security;
• Arms Length & Subsidiary:
  • Accountable for the oversight and reporting of security posture of the critical Global Bayer affiliates by standardizing information security management systems, leveraging controls in commonly used technology, and extending cyber security foundation services to each;
• Key Working Relations:
  • Internal:
    • US Law Team;
    • Risk & Assurance Committees;
    • Divisional ExCo’s;
    • Global Leadership Council;
    • Crop Science IT Leadership Team;
    • DFS Heads and Climate Leadership;
    • M&A;
    • Bayer Boards;
  • External:
    • 3rd Party executives; Consultants, Partners and Auditors;
    • Managed Service Executive Partners;
    • US Federal Bureau of Investigation;
    • US Department of Homeland Security;
    • Global Security Alliances / Partners;
    • US Department of Agriculture;
    • Arm’s length companies;
• The primary location for this role is Creve Coeur, MO (preferred) or Whippany, NJ.  Relocation may be offered for this role.

WHO YOU ARE

Bayer seeks an incumbent who possesses the following:

Required Qualifications:

• Bachelor’s or Master’s degree in Information Security, Computer Science, or a related field;
• Certifications such as CISSP, CISM, or equivalent, demonstrating a professional level of expertise in information security;
• Proven experience in an executive cybersecurity role, with a comprehensive understanding of information security principles, frameworks, and standards;
• Familiarity with the CIISec Skills Framework and an understanding of specialisms in risk management and security architecture as identified by relevant authorities;
• Strong (VACC) leadership abilities with excellent communication skills, capable of articulating complex security concepts to diverse audiences and leading a team of security professionals;
• Exceptional analytical skills with the ability to identify and address security vulnerabilities and threats proactively;
• Deep knowledge of information security technologies and frameworks, with a commitment to staying informed about the latest industry trends and solutions;
• A collaborative mindset, capable of working effectively across different departments and with external partners to enhance the organization's security posture;

Preferred Qualifications:

• Able to achieve US Government background clearance;
• Relevant experience in a digital native organization (Cloud, DevSecOps,  AI).

This posting will be available for application until at least 10/16/2024.