Director - Info Technology & Security

Merck & Co. - Louisville, KY

Full-time - Senior

Louisville, KY

Chemical Manufacturing

About the position

The position involves leading and managing the Information Security Program and IT infrastructure at MSD, ensuring secure and efficient operations across on-premise, cloud, and hybrid environments. The role focuses on aligning the Information Security Program with the organization's strategic goals, driving continuous improvement, and fostering a culture of trust and collaboration within the IT department and across the company.

Responsibilities

• Plan and direct activities for the Information Security Program and IT infrastructure.
• Coordinate and consult with departments on security and IT needs.
• Identify and manage information security and IT risks.
• Develop and maintain relationships across the company to foster a high trust culture.
• Establish an organizational structure to support the Information Security Program.
• Monitor performance measures and ensure systems operate as designed.
• Coach and evaluate personnel in information security and IT infrastructure.
• Manage the operational and capital budget for the Information Security Program.
• Oversee information security components of MSD projects and develop related policies.
• Research and evaluate enhancements for the Information Security Program and IT infrastructure.
• Perform vendor management and negotiate IT service level agreements.
• Develop and test disaster recovery plans for IT services.
• Drive information security awareness and best practices across the organization.
• Develop and execute strategic and operating plans for the Information Security Program.

Requirements

• Bachelor's Degree in computer science, engineering, or a related field.
• Ten or more years of technical experience in information technology.
• Five or more years of management experience.
• Valid driver's license and safe work habits.

Nice-to-haves

• Experience managing an Information Security Program.
• Information security and cybersecurity certification(s).