Security Process Improvement Principal

Summary:

This role is responsible for leading and overseeing the planning, execution, and management of optimized and effective information security processes. Security Process Improvement Principal develops, reviews, and analyzes security process efficacy against organizational benchmarks and key performance indicators to evaluate effectiveness, provide actionable insights, identify process risk, and drive continuous improvement. They lead the design, development, and execution of security process practices, ensuring effectiveness, efficiency, and adaptability to evolving threats and compliance requirements. They collaborate closely with multiple internal and external stakeholders (senior security leadership, IT and business leadership, etc.) to drive security process integration, ensure cohesive approach to risk mitigation, and measure process improvements. They are expected to have a deep understanding of the security processes they are optimizing. They play a key role in defining target state information security processes, principles, and best practices. They act as a subject matter expert and participate in senior leadership meetings to bring security process improvement perspective to the broader organization.

Responsibilities:

• Manages and leads assessments of existing security processes, identifying inefficiencies and areas for enhancement to ensure alignment with organizational goals and compliance requirements

• Develops and implements security process strategies, frameworks, and methodologies that promote security operational excellence, risk management, and compliance with industry standards

• Collaborates with cross-functional teams, including IT and business partners, to develop and implement strategies to ensure integrated and optimized security measures and processes across the organization

• Formulates methodologies to monitor, assess, and analyze security process performance against organizational benchmarks and key performance indicators to evaluate effectiveness, provide actionable insights, identify risk, and drive continuous improvement with senior management

• Deliver clear and comprehensive reporting that summarizes process performance, outcomes, risks, and strategic insights to security leadership to ensure transparent communication and drive proactive, informed decision-making

• Analyzes and recommends technologies and automation that can enhance security process efficiency, ensuring seamless integration with existing systems

• Provides process improvement guidance, coaching, and mentorship to other security process owners and managers in improving and executing their tasks and responsibilities

• Guides, coaches, and mentors Analysts Lead/I/II/III as a subject matter expert in security process optimization, providing guidance and support to teams in implementing security best practices

• Leads security planning and analysis activities and provides strategic and tactical direction on security process design, improvement, and integration

Education:

• Bachelor's Degree in Computer Science, Information Technology or any other related discipline or equivalent related experience.

Preferred Certifications:

• Process optimization / improvement certification (e.g., Six Sigma / Lean Six Sigma, etc.)

• Change management certification (e.g., Prosci, etc.)

• Industry Agile certification (e.g., SAFe Agilist, SAFe LPM, etc.)

• Certified Cloud Security Professional (CCSP)

• Certification in Information Security Strategy Management (CISM)

• Certified Information Systems Security Professional (CISSP)

• CompTIA Security + Certification

• Systems Security Certified Practitioner (SSCP)

• TS-SCI Security Clearance Certification

Experience:

• 8+ years of directly-related or relevant experience, preferably in information security.

Behavioral Skills:

• Analytical Skills: Strong analytical and problem-solving skills, with a focus on data-driven decision making

• Consulting and Influencing: strong ability to assess customer needs, provide expert advice, and develop solutions that enhance portfolio performance and alignment with organizational objectives

• Strategic Communication: able to simplify the complex with proven experience presenting to top level leaders

• Adaptability: Ability to adjust approach in response to changing or evolving organizational conditions or priorities

• Collaboration: strong inclination to work effectively with different teams, foster a spirit of cooperation, and break down silos

Technical Skills:

• Cybersecurity: strong knowledge of cyber principles, frameworks, technologies, and standards (SOX, ISO 27001/27002, COBIT, ITIL, NIST, PCI)

• Process Engineering: Knowledge of techniques for rethinking and redesigning organizational processes to achieve significant improvements.

• Lean Six Sigma methodologies: Understanding and applying improvement tools, methodologies, and principles to improve process efficiency and quality.

• Data and Statistical Analysis: Proficiency in analyzing data to identify trends, variances, and opportunities for improvement

• Performance Metrics and KPIs: Ability to define, track, and analyze key performance indicators (KPIs) to measure process effectiveness and improvement outcomes.

• Process Mapping and Flowcharting: Ability to create visual representations of processes to understand workflows, identify bottlenecks, and analyze efficiency.

• Change Management: Skills in managing and facilitating organizational change, including stakeholder engagement and communication strategies.

Tools Knowledge:

• Microsoft Office Suite

• Process mapping and flowcharting tools (e.g., Visio)

• Data analysis and visualization (e.g., PowerBI)

We provide compensation, benefits, and resources that enable a highly inclusive culture and support our team members' ability to live with purpose every day. In addition to traditional offerings like medical, dental, and vision care, we also provide a comprehensive suite of benefits that focus on the physical, emotional, financial, and social aspects of wellness. This encompasses support for working families, which may include backup dependent care, adoption assistance, infertility coverage, family building support, behavioral health solutions, paid parental leave, and paid caregiver leave. To encourage your personal growth, we also offer a variety of training programs, professional development resources, and opportunities to participate in mentorship programs, employee resource groups, volunteer activities, and much more. For details, visit https://www.virtualfairhub.com/cencora

*This Salary Range reflects a National Average for this job. The actual range may vary based on your locale. Ranges in Colorado/California/Washington/New York/Hawaii/Vermont/Minnesota/Massachusetts/Illinois State-specific locations may be up to 10% lower than the minimum salary range, and 12% higher than the maximum salary range.

Cencora is committed to providing equal employment opportunity without regard to race, color, religion, sex, sexual orientation, gender identity, genetic information, national origin, age, disability, veteran status or membership in any other class protected by federal, state or local law.

The company's continued success depends on the full and effective utilization of qualified individuals. Therefore, harassment is prohibited and all matters related to recruiting, training, compensation, benefits, promotions and transfers comply with equal opportunity principles and are non-discriminatory.

Cencora is committed to providing reasonable accommodations to individuals with disabilities during the employment process which are consistent with legal requirements. If you wish to request an accommodation while seeking employment, please call 888.692.2272 or email hrsc@cencora.com. We will make accommodation determinations on a request-by-request basis. Messages and emails regarding anything other than accommodations requests will not be returned

.