Associate Director, Attack Surface Reduction

The Associate Director: Attack Surface Reduction role presents a dynamic opportunity to ensure the secure operation of the IQVIA global information technology (IT) infrastructure and processes through developing and implementing new cybersecurity safeguards, amending and improving existing safeguards, as well as contributing to implementation of necessary security measures and controls within projects across the enterprise.

This role plays a part in our global Cyber Fusion Center team and will provide an excellent opportunity to liaise with key external and internal stakeholders while strengthening our Information Security function.

You will work closely with and will be part of the Global Technology & Operations organization structure partnering with the Business Units community and their related teams. You will also find yourself working together with other IQVIA Information Security managers and staff, and with Business Unit teams. This is an opportunity to join and progress with a forward-thinking department.

The Associate Director of Attack Surface Reduction will lead and manage initiatives to identify, analyze, and mitigate vulnerabilities within our organization’s IT infrastructure. This role requires a deep understanding of cybersecurity principles, excellent leadership skills, and the ability to work cross-functionally to ensure the security and resilience of our digital assets. The ideal candidate will possess a proactive approach to security, staying ahead of emerging threats and continuously improving our security posture.

Principal responsibilities will include:
    · Leadership and Strategy:
        ○ Develop and implement strategies to reduce the organization’s attack surface.
        ○ Lead a team of security professionals focused on vulnerability management and cyber threat intelligence.
        ○ Collaborate with senior leadership to align security initiatives with business objectives.
    · Vulnerability Management:
        ○ Oversee regular security assessments, vulnerability scans, and penetration tests.
        ○ Prioritize and remediate identified vulnerabilities in collaboration with IT and development teams.
    · Cyber Threat Intelligence:
        ○ Monitor and analyze threat intelligence to identify potential risks to the organization.
        ○ Provide guidance on emerging threats and recommend mitigation strategies.
    · Administrative:
        ○ Develop and maintain security policies, procedures, and standards.
        ○ Communicate effectively with stakeholders regarding security initiatives.
        ○ Prepare and present regular reports on security posture and activities to executive leadership.

Required Experience and Qualifications
    · Minimum of 7 years of professional experience in Information Security, IT Delivery, IT Program Management or other related areas.
    · Experience with vulnerability management and cyber threat intelligence tools such as Qualys, Nessus, MISP, Anomali, etc.
    · Bachelor’s degree in Computer Science, Information Security, or a related field. Master’s degree preferred.
    · A CISSP, CISM, CEH or equivalent professional certificate is mandatory.
    · Proven experience in a leadership or management role within cybersecurity.
    · Strong understanding of security frameworks and standards (e.g., NIST, ISO 27001).
    · Excellent analytical, problem-solving, and decision-making skills.
    · Strong communication and interpersonal skills, with the ability to explain complex security issues to non-technical stakeholders.
    · Ability to manage multiple projects and priorities in a fast-paced environment.

IQVIA is a leading global provider of clinical research services, commercial insights and healthcare intelligence to the life sciences and healthcare industries. We create intelligent connections to accelerate the development and commercialization of innovative medical treatments to help improve patient outcomes and population health worldwide. Learn more at https://jobs.iqvia.com

At IQVIA, we believe that diversity, inclusion, and belonging empower our mission to accelerate innovation for a healthier world. We create a culture of belonging by valuing the perspectives of all talented employees worldwide and providing them with the opportunity to power smarter healthcare for everyone, everywhere. When our talented employees bring their authentic selves and their diverse experiences to work, they enable us to accomplish extraordinary things. Multifaceted thought processes spark innovation. Multi-talented collaboration harnesses innovation to deliver superior outcomes.