Senior Security Architect

**Senior Security Architect**

**Location: Oeiras, Portugal**

**Job Overview**:
The Security Architect role presents a dynamic opportunity to ensure the secure operation of the IQVIA Global Technology & Operations (GTO) cloud-based and acquired/merged infrastructure and processes through developing and implementing new Cybersecurity safeguards, amending and improving existing safeguards, as well as contributing to implementation of necessary security measures and controls within projects across the enterprise. This role is part of the GTO M&A team with focuses on Information Security. The position will provide an excellent opportunity to liaise with key external and internal stakeholders while strengthening our Information Security function. You will also find yourself working together with other IQVIA Information Security managers and staff, and with Business Unit teams. This is an opportunity to join and progress with a forward-thinking department.

**Principal responsibilities will include**:

- Work with IQVIA integration teams to secure M&A environments in alignment with IQVIA process, policies and standards.
- Support a security program focusing on acquisition environments, including both new technological and organizational capabilities across the enterprise.
- Engage with third-party specialist service providers and vendors where necessary to support program deliverables, including carrying out vendor and product selections and organizing necessary operational support.
- Work with a team to develop the improvement of the landscape of technical security safeguards, including assessment and deployment of new capabilities, technologies, and systems as it relates to the M&A environments.
- Develop secure architecture strategies for IQVIA with respect to technology domain standards and design goals.
- Research and identify emerging technology solutions that reduce costs, increase efficiencies, provide more value, provide more capabilities, reduce risks, and increase security posture.
- Evaluate information security components and conduct feasibility studies for selecting appropriate and cost-effective solutions.
- Assess risks for each security control included in the security integration process and work with Risk Management teams & IT Project Manager to update risk register, current controls, and risk treatment plan.

**Experience and Qualifications**:

- 3 to 5 years of professional experience in Information Security, IT Delivery, IT Program Management, or other related areas.
- Experience conducting security assessments to identify gaps in security architecture and controls.
- Experience with cloud security and cloud security platforms such as CASB, SASE, CSPM, CWPP, SaaS security, CSP (Azure and AWS), IaaS/PaaS security.
- Bachelor's degree in Business Administration, Computer Sciences, or equivalent work experience in related areas is preferred.
- A CISSP, CISM, CCSP, or equivalent professional certificate.
- Working knowledge of IT governance frameworks and standards such as CobiT, ITIL, ISO27001, NIST cybersecurity framework.
- Working knowledge of IT architecture frameworks such as TOGAF and/or project management methodologies.
- Working knowledge of regulatory and legal requirements frameworks related to information security for healthcare data, such as HIPAA, EU Data Protection Directive, and/or equivalent regional frameworks is preferred.

J-18808-Ljbffr