IT Security Compliance Manager (Tarrytown, NY)

Prestige Consumer Healthcare Inc. (PCH) markets and sells well recognized brand name consumer healthcare products:  Company sales are at $1.2B worldwide. PCH has grown through organic growth in many of our number #1 product lines as well as through acquisitions. PCH is running the company on SAP systems specifically S/4 Hana, IBP SNOP, DP and Vistex for Trade Promotion and Deductions Management. S/4 Hana has approximately 300+ users worldwide and all users are on one on premise instance of SAP in our Tarrytown Corporate office.  SAP is a very flexible, fully integrated and complex ERP system that will allow PCH to continue to sustain growth for many years. #hybridwork

PCH IT will need to address the following areas:

• Risk Mitigation: Mitigate risk by maintaining information security documentation and assisting in the development of security policies and procedures. We will also require additional investment in its governing, tools and processes.
  • Growth of Information Security Policy – support Prestige to elevate operational processes and formalize across the organization
  • Optimization:  Continually look for improvements/new opportunities to improve efficiencies & benefits in the business
  • Training:  Manage the Cyber Security training programs and fake Phish attacks performed at Prestige
  • Inter-module Dependencies:  Security Compliance Officer will work with Network teams and IT management to enhance security controls and documentation

Primary Responsibilities for Security Compliance Manager

• Work with internal and external auditors to manage the Sarbanes Oxley Compliance and Segregation of Duties
• Keep all global IT SOP’s current and reviewed on an annual basis
• Create and update all IT policies and procedures related to NIST CSF compliance
• Manage the Cyber security training program and fake phishing attacks to company employees currently in Proofpoint
• Train staff on new security policies and procedures
• Manage vendor security compliance audits and support recommendations
• Responsible for leading efforts that include collecting and organizing written responses and documentation, leading calls and meetings to gather information from vendors, and ensuring that all follow-up communications and remediation items are completed on time. You will be responsible for scheduling and coordinating vulnerability assessments, penetration tests
• Organizing and conducting meetings of the firm’s cloud security review team, coordinating the assessment of vendors, and leveraging team members’ expertise in the vendor review process
• Creating and presenting regular reports to IT senior technology management
• Make recommendations and advise on organization-wide processes
• Maintain Global IT SOP’s and procedures

Knowledge and Skills Requirements:

Qualifications:

• A minimum of 2-3 years of experience focused on information security is required
• A minimum of two (2) years of experience applying project management concepts is required
• Background in developing Global SOP’s.
• Background in Cyber Security training and controls.
• Familiarity with NIST CSF compliance
• Excellent  written and verbal communication skills
• Must have business process knowledge
• Must be a team player and must contribute at the team level

Education and Training Requirements:

• Requiring at least 5+ years with documentation around IT policies and procedures
• Must have Enterprise level experience with solutions and driving continuous improvement throughout the organization
• Must have professional experience

Working Conditions:

• Must be able to work from the Prestige Consumer Healthcare office in Tarrytown, NY in a hybrid scenario, 3 days a week in Tarrytown(Tuesday – Thursday)  Monday and Friday are work from home days
• Must be able to remotely support the organization with their critical issues should the need arise.
• Must be able to act in a professional manner at all times
• Must have the personality to work with all levels of management at any time
• Must be able to work in a Validated environment and stay within the confines of change control
• Must be able to follow Company Policies and Procedures