Director of Cybersecurity Governance

1 day ago

GondrecourtleChâteau, Grand Est, United States Solventum Full time

Solventum is a leading healthcare company that enables better, smarter, safer healthcare to improve lives. As a new company with a long legacy of creating breakthrough solutions for our customers' toughest challenges, we pioneer game-changing innovations at the intersection of health, material, and data science that change patients' lives for the better while enabling healthcare professionals to perform at their best.

We partner closely with the brightest minds in healthcare to ensure that every solution we create melds the latest technology with compassion and empathy. Because people, and their wellbeing, are at the heart of every scientific advancement we pursue.

The Impact You'll Make in this Role

As Director of Security Governance, you will lead the overall information security governance program and strategy, providing skilled leadership to build high-performing teams, and engaging IT and Business leaders across a wide spectrum of projects. Your collaborative approach and exceptional communication skills will play a significant role in your success, as you engage and support colleagues inside and outside the organization.

Responsibilities

  • Develop and execute a gold-standard information security governance strategy and program, driving a culture of transparency, integrity, and accountability.
  • Focus efforts to support cyber- and business resilience, ensuring the organization is well-prepared to counter risks to continuity of operations.
  • Develop the appropriate security checkpoints against software and infrastructure development lifecycles, shifting effort to prevent rework and build security by design into every project.
  • Establish a robust Findings & Remediation program that identifies trends in newly discovered risks, provides actionable reporting, identifies root cause, and works collaboratively to reduce inherent risk and technical debt.
  • Identify, mitigate, and track to closure risks across the enterprise, providing actionable data and recommended solutions to organization leadership.
  • Use expertise to scale programs up and down to meet the current regulatory environment and the risk appetite of the organization.
  • Establish and maintain robust data security governance, including creation, classification, retention, retrieval, and disposal of records.
  • Monitor regulatory changes and industry standards.
  • Coordinate the transfer of information into or out of the firm in compliance with organizational policies. When necessary, ensure the proper execution of destruction orders.
  • Implement supporting protocols and processes to ensure statutory, regulatory, ethical, and privacy requirements are met for the management of physical and electronic information.
  • Support data governance efforts across the organization, including but not limited to data classification, data retention and disposal, data sharing, records management, archiving data, and data privacy.

Your Skills and Expertise

To set you up for success in this role from day one, Solventum requires (at a minimum) the following qualifications:

  • Bachelor's Degree or higher from an accredited institution OR High School Diploma/GED or higher from a (completed and verified prior to start) and a minimum of sixteen (16) years of experience in Information Technology/Information Security.
  • Extensive background in Governance, Risk & Compliance, with particular focus on Governance in Healthcare or other highly regulated industry.
  • Experience building and optimizing best practice Enterprise Risk Management, Third Party Risk Management, Risk Quantification, as well as Data Governance and Artificial Intelligence (AI).
  • Supporting certifications and coursework demonstrating continual learning. CISSP strongly preferred, or equivalent experience across a broad spectrum of Information Security disciplines.
  • Ten (10) years of experience building and leading global IT, digital, and/or cybersecurity programs in a private, public, government, or military environment.
  • Minimum five (5+) years leading Information Security Governance programs.
  • Successful track record developing and leading information governance programs, policies, procedures, and best practices.
  • Experience working with Risk, Security, and/or Audit frameworks (SOX, HiTrust, SOC2, PCI, ISO 27001/2, NIST CFS / 800-53, FedRAMP, StateRAMP, and EIC 62443, etc.).

Additional qualifications that could help you succeed even further in this role include:

  • Master's Degree in Computer Science, Information Security, or related field from an accredited institution.
  • Successful track record of leading organizations through external audits and assessments. Experience writing and communicating directly with regulators and external auditors, responding appropriately to external inquiries while protecting the organization.
  • In-depth knowledge of legal and regulatory requirements, including data protection laws (e.g., GDPR, CCPA) and legal hold obligations.
  • Supporting certifications such as CRISC, CISM.
  • Experience leading Business Continuity Planning and/or Cyber Resilience teams.
  • Experience advising on a range of cyber risk management activities and information security industry best practices.

Work Location:

  • Remote USA

Travel: May include up to 5% domestic/international]

Relocation Assistance: May be authorized

Must be legally authorized to work in country of employment without sponsorship for employment visa status (e.g., H1B status).

Supporting Your Well-being

Solventum offers many programs to help you live your best life both physically and financially. To ensure competitive pay and benefits, Solventum regularly benchmarks with other companies that are comparable in size and scope.

Applicable to US Applicants Only:The expected compensation range for this position is $222,044 - $271,387, which includes base pay plus variable incentive pay, if eligible. This range represents a good faith estimate for this position. The specific compensation offered to a candidate may vary based on factors including, but not limited to, the candidate's relevant knowledge, training, skills, work location, and/or experience. In addition, this position may be eligible for a range of benefits (e.g., Medical, Dental & Vision, Health Savings Accounts, Health Care & Dependent Care Flexible Spending Accounts, Disability Benefits, Life Insurance, Voluntary Benefits, Paid Absences and Retirement Benefits, etc.). Additional information is available at: https://www.solventum.com/en-us/home/our-company/careers/#Total-Rewards Responsibilities of this position include that corporate policies, procedures, and security standards are complied with while performing assigned duties.

Solventum is committed to maintaining the highest standards of integrity and professionalism in our recruitment process. Applicants must remain alert to fraudulent job postings and recruitment schemes that falsely claim to represent Solventum and seek to exploit job seekers.

Please note that all email communications from Solventum regarding job opportunities with the company will be from an email with a domain of @solventum.com. Be wary of unsolicited emails or messages regarding Solventum job opportunities from emails with other email domains.

Solventum is an equal opportunity employer. Solventum will not discriminate against any applicant for employment on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, or veteran status.

Please note: your application may not be considered if you do not provide your education and work history, either by: 1) uploading a resume, or 2) entering the information into the application fields directly.

Solventum Global Terms of Use and Privacy Statement

Carefully read these Terms of Use before using this website. Your access to and use of this website and application for a job at Solventum are conditioned on your acceptance and compliance with these terms.

Please access the linked document by clicking here, select the country where you are applying for employment, and review. Before submitting your application you will be asked to confirm your agreement with the
terms.

  • Director of Cybersecurity Governance

    1 week ago

    Gondrecourt-le-Château, Grand Est, United States Solventum Full time

    Solventum is a leading healthcare company that enables better, smarter, safer healthcare to improve lives. As a new company with a long legacy of creating breakthrough solutions for our customers' toughest challenges, we pioneer game-changing innovations at the intersection of health, material, and data science that change patients' lives for the better...

  • Head of Third-Party Cybersecurity Risk Management

    1 month ago

    Gondrecourt-le-Château, Grand Est, United States PRI Technology Full time

    Senior Director of Vendor Cyber Risk OversightFull-time/Permanent positionRemote work available across the United States, with a preference for candidates located in Saint Paul, MN.No third-party resumes accepted. Candidates must have legal authorization to work in the country of employment without the need for sponsorship for employment visa status.This...

  • Director of Cyber Risk Management

    4 weeks ago

    Gondrecourt-le-Château, Grand Est, United States PRI Technology Full time

    Job Summary:The Director of Cyber Risk Management will lead the development and execution of PRI Technology's third-party cyber risk management program. This role ensures compliance with regulatory requirements, aligns with corporate cyber policies, and meets the organization's risk management standards.Key Responsibilities:Program Development and...

  • Associate Director, Information Security Governance

    3 weeks ago

    Gondrecourt-le-Château, Grand Est, United States Baker & McKenzie Rechtsanwaltsgesellschaft mbH Full time

    Job SummaryWe are seeking an experienced Associate Director, Information Security GRC to join our team at Baker & McKenzie Rechtsanwaltsgesellschaft mbH. The successful candidate will be responsible for managing the people, processes, and technology related to our security GRC group, overseeing governance, risk, and compliance activities, and ensuring...

  • Director of Community Engagement

    4 weeks ago

    Gondrecourt-le-Château, Grand Est, United States Minnesota Council of Nonprofits Full time

    Job SummaryWe are seeking a highly skilled and experienced Executive Director to lead our organization, the Minnesota Council of Nonprofits, in its mission to promote and support the nonprofit sector in Minnesota. The successful candidate will have a strong background in community development, program management, and local government, with a proven track...

  • State Director

    1 week ago

    Gondrecourt-le-Château, Grand Est, United States National Federation of Independent Business Full time

    {"title": "State Director", "content": "OverviewThe National Federation of Independent Business (NFIB) is seeking a highly skilled State Director to join its State Government Relations team in Minnesota. As a key member of the team, you will be responsible for influencing public policy at the state level and serving as a resource for small and independent...

  • State Director

    2 weeks ago

    Gondrecourt-le-Château, Grand Est, United States National Federation of Independent Business Full time

    {"title": "State Director", "content": "OverviewThe National Federation of Independent Business (NFIB) is seeking a highly skilled State Director to join its State Government Relations team in Minnesota. As a key member of the team, you will be responsible for influencing public policy at the state level and serving as a resource for small and independent...

  • Executive Director

    4 weeks ago

    Gondrecourt-le-Château, Grand Est, United States Minnesota Council of Nonprofits Full time

    Job Title: Executive DirectorWe are seeking a highly skilled and experienced Executive Director to lead our organization, the Minnesota Council of Nonprofits, in our mission to strengthen and support the nonprofit sector in Minnesota.About the PositionThe Executive Director will be responsible for overseeing the overall strategy and direction of the...

  • Executive Director: State Program Administrator Manager Principal

    4 weeks ago

    Gondrecourt-le-Château, Grand Est, United States State of Minnesota Full time

    Job SummaryThis is a key leadership position that will play a critical role in establishing and directing the Minnesota Climate Innovation Finance Authority (MnCIFA). The successful candidate will have a strong background in strategic leadership, program development, and management, with a focus on climate innovation and finance.Key ResponsibilitiesLead the...

  • Strategic Operations Director

    4 weeks ago

    Gondrecourt-le-Château, Grand Est, United States University of Minnesota Full time

    About the RoleThe University of Minnesota is seeking a highly skilled and experienced Strategic Operations Director to serve as the Chief of Staff for the Office for Equity and Diversity. This critical role will provide strategic advice and counsel to the Vice President for Equity and Diversity, driving the implementation of strategic projects, directives,...

  • Strategic Operations Director

    3 weeks ago

    Gondrecourt-le-Château, Grand Est, United States University of Minnesota Full time

    About the JobThe University of Minnesota seeks a highly skilled and experienced Strategic Operations Director to serve as the Chief of Staff for the Vice President of Equity and Diversity. This critical role will drive, facilitate, and support the University's strategic projects, directives, and initiatives related to equity, diversity, and inclusion.Key...

  • Education Program Director

    3 weeks ago

    Gondrecourt-le-Château, Grand Est, United States University of Minnesota Full time

    {"h1": "Education Program Director", "p": "The University of Minnesota is seeking an experienced Education Program Director to lead our education department and core program initiatives. As a key leadership role, you will provide strategic leadership, guidance, and management oversight to shape the future of our education programming. This includes leading...

  • State Director I

    3 weeks ago

    Gondrecourt-le-Château, Grand Est, United States National Federation of Independent Business Full time

    OverviewThe National Federation of Independent Business (NFIB) seeks a highly skilled State Director to lead its State Government Relations team in Minnesota. As a key member of the team, you will be responsible for influencing public policy at the state level and serving as a resource for small and independent businesses in your...

  • Deputy Director of Public Policy

    2 weeks ago

    Gondrecourt-le-Château, Grand Est, United States Minnesota Council of Nonprofits Full time

    Job Title: Deputy DirectorAbout the Role:The Minnesota Council of Nonprofits is seeking a highly skilled and experienced Deputy Director to join our team. As a key member of our leadership team, you will play a critical role in advancing our mission to make Minnesota a place where everyone can thrive, regardless of who they are or where they live.Key...

  • Executive Director

    4 weeks ago

    Gondrecourt-le-Château, Grand Est, United States MN Association of Charter Schools Full time

    Job SummaryThe Executive Director will provide strategic leadership and direction to the school, ensuring the achievement of its mission and vision. This role will oversee the development and implementation of school policies, procedures, and programs, as well as provide guidance and support to staff members.Key ResponsibilitiesLeadership and...

  • Land and Minerals Director

    3 weeks ago

    Gondrecourt-le-Château, Grand Est, United States St. Louis County Full time

    Job SummarySt. Louis County is seeking a highly qualified professional to serve as its Land and Minerals Director. The Director will oversee the management of the county's land and mineral resources, ensuring their optimal use for the benefit of the community.Key ResponsibilitiesManage the operations of the Land and Minerals Department, including staff...

  • Executive Director

    4 weeks ago

    Gondrecourt-le-Château, Grand Est, United States Asian American Arts Alliance Full time

    About the RoleWe are seeking a highly skilled and experienced Executive Director to lead our organization, Asian American Arts Alliance, in its mission to promote and support Asian American arts and culture. The successful candidate will have a strong track record of leadership, fundraising, and community engagement.Key ResponsibilitiesDevelop and implement...

  • Infrastructure Director

    7 days ago

    Gondrecourt-le-Château, Grand Est, United States University of Minnesota Full time

    Job Title: Infrastructure DirectorJoin the University of Minnesota as an Infrastructure Director and lead the facilities management, cage wash, and supply chain operations of the Research Animal Resources (RAR) department. As a key member of the RAR Senior Leadership Team, you will be responsible for ensuring the animal facility environment is in compliance...

  • Global Operations Director

    3 weeks ago

    Gondrecourt-le-Château, Grand Est, United States 3M Full time

    Job Title: Global Operations Director3M is seeking a highly skilled Global Operations Director to lead our 3rd Party Manufacturing Operations for Filling, Packaging & Converting Services. As a key member of our team, you will be responsible for driving operational excellence at 3PM suppliers and developing and executing long-term strategic plans to improve...

  • IT Risk Manager

    3 days ago

    Gondrecourt-le-Château, Grand Est, United States EisnerAmper Full time

    About the RoleEisnerAmper is seeking a highly skilled IT Risk Manager to join its Risk & Compliance Services practice as a dedicated member of the IT Risk, Data Privacy & Security team.The successful candidate will have a strong background in IT risk advisory and/or cybersecurity, with a proven track record of delivering exceptional services to clients.Key...