Lead, Governance, Risk & Compliance (Remote)
Emergent BioSolutions
August 13, 2026
Remote
United States
Corporate Functions
Job Summary
- Oversee cybersecurity governance, risk management, and compliance processes, including data protection and security awareness training (full-time remote). Individual contributor reporting to IT VP and CISO.
- Mature enterprise data protection capabilities (data classification, DLP, information protection, data governance). Expand to support Manufacturing OT security and broader GRC (cybersecurity risk management, regulatory compliance, security policies/standards, security governance).
Core Responsibilities
- Lead data protection technology implementation/governance: data classification & labeling, DLP, insider risk management, data discovery & inventory, records.
- Partner with business stakeholders to identify/classify/protect information; establish data owner/custodian/user governance.
- Define data protection KPIs/metrics and report to executives; remediate inadequately protected data; ensure data protection policy compliance; drive adoption via training/change management.
- Improve maturity for IS27001/CMMC (NIST-aligned); run cybersecurity maturity assessments; create/maintain cybersecurity metrics.
- Establish governance frameworks/operating models; support cyber councils/forums/steering committees.
- Maintain cybersecurity risk register; support risk quantification/prioritization; document/approve technology, operational, third-party, and data-related risks; provide risk dashboards.
- Own/develop security policies; maintain security awareness/training and company campaigns; lead audits/readiness for internal/external audits.
- Support manufacturing security workstreams (network segmentation, secure remote access, logging, OT incident management); deliver manufacturing cyber training; support BCP and cyber tabletop exercises.
Qualifications
- Bachelor’s in Business or Information Systems (or equivalent).
- 5+ years in cybersecurity/compliance/risk management (or 7+ years related); lead cybersecurity projects/programs; hands-on experience with cybersecurity tools/methodologies.
- Manufacturing cybersecurity experience; knowledge of network computing, vulnerability management, IAM/PAM.
- Familiarity with SOX, SSAE 18 SOC reports, NIST CSF, ISO27001, CMMC.
Skills/Abilities
- Strong collaboration and communication; program management; author policy documents and conduct business risk assessments.
- Identify sensitive data (PII/PHI/clinical data). Demonstrated cross-organization conflict resolution, organization-wide communications, and security risk management/documentation.
- Oversee cybersecurity governance, risk management, and compliance processes, including data protection and security awareness training (full-time remote). Individual contributor reporting to IT VP and CISO.
- Mature enterprise data protection capabilities (data classification, DLP, information protection, data governance). Expand to support Manufacturing OT security and broader GRC (cybersecurity risk management, regulatory compliance, security policies/standards, security governance).
Core Responsibilities
- Lead data protection technology implementation/governance: data classification & labeling, DLP, insider risk management, data discovery & inventory, records.
- Partner with business stakeholders to identify/classify/protect information; establish data owner/custodian/user governance.
- Define data protection KPIs/metrics and report to executives; remediate inadequately protected data; ensure data protection policy compliance; drive adoption via training/change management.
- Improve maturity for IS27001/CMMC (NIST-aligned); run cybersecurity maturity assessments; create/maintain cybersecurity metrics.
- Establish governance frameworks/operating models; support cyber councils/forums/steering committees.
- Maintain cybersecurity risk register; support risk quantification/prioritization; document/approve technology, operational, third-party, and data-related risks; provide risk dashboards.
- Own/develop security policies; maintain security awareness/training and company campaigns; lead audits/readiness for internal/external audits.
- Support manufacturing security workstreams (network segmentation, secure remote access, logging, OT incident management); deliver manufacturing cyber training; support BCP and cyber tabletop exercises.
Qualifications
- Bachelor’s in Business or Information Systems (or equivalent).
- 5+ years in cybersecurity/compliance/risk management (or 7+ years related); lead cybersecurity projects/programs; hands-on experience with cybersecurity tools/methodologies.
- Manufacturing cybersecurity experience; knowledge of network computing, vulnerability management, IAM/PAM.
- Familiarity with SOX, SSAE 18 SOC reports, NIST CSF, ISO27001, CMMC.
Skills/Abilities
- Strong collaboration and communication; program management; author policy documents and conduct business risk assessments.
- Identify sensitive data (PII/PHI/clinical data). Demonstrated cross-organization conflict resolution, organization-wide communications, and security risk management/documentation.