Cybersecurity Manager Vision Commercial

Responsibilities

• Partner with project teams to deliver required security capabilities/services for innovative technology solutions; support end-to-end large programs.
• Provide tailored security guidance by risk/complexity; interpret and apply Asset Protection Policy (IAPP) requirements.
• Drive cybersecurity adoption across Vision Commercial functions (sales, market access, digital marketing, e-commerce, commercial operations) to secure go-to-market processes and enterprise commercial platforms.
• Lead adoption of cybersecurity best practices to protect patient/customer/business data across commercial workflows and digital engagement capabilities.
• Lead the cyber operational portfolio: identify issues, define remediation plans, and drive completion with ISRM/business/technology teams.
• Establish security posture analytics across business units/functions/sites.
• Support Cyber Defense Center (CDC) incident investigations and liaise with central investigation teams.
• Ensure solutions meet cybersecurity/privacy/data protection requirements and compliance standards (e.g., NIST, ISO
  27001, NIS2, HDS, PGSSI-S, SOX).
• Support global security initiative deployment (awareness, alternative ways of working, exception review).
• Drive security gap assessments and remediation for Vision Commercial capabilities, including new market/platform/business integrations.

• Bachelor’s degree in cybersecurity/CS/IT/business administration or related discipline (Master’s strongly preferred).
• 5+ years IT/engineering with security focus; hands-on implementation of core security technologies/controls (access control, IDP/IDR, anti-malware, patch management, encryption, forensics, etc.).
• Knowledge of enterprise/digital business security (identity, endpoint, network, cloud, enterprise commercial platform security).
• Experience supporting Med Tech commercial functions; preferred experience supporting Vision commercial teams.
• Experience performing security assessments and security assurance across enterprise architecture layers.
• Understanding of security threats/mitigation and security vendors/technologies.
• Cloud security experience (AWS, Azure).
• Security standards experience (ISO
  27001, HiTrust, NIST, etc.); CISM/CISSP/CISA/CRISC preferred.
• English fluency required.

• Business process design
• Crisis management
• Critical thinking
• Inclusive leadership
• Information security auditing/ISMS
• IT security assessments/strategies
• Leadership, people performance management
• Presentation design
• Process optimization
• Resource planning
• Security architecture/policies
• Tactical planning
• Vulnerability management

• Annual bonus (set target based on pay grade/location) and/or sales commissions
• Vacation days
• Parental leave (minimum 12 weeks)
• Bereavement/caregiver/volunteer leave
• Well‑being reimbursement
• Programs for financial/physical/mental health
• Service anniversary/recognition awards
• Eligibility for insurance plans (and sometimes dependents)