Information Security Manager

About the role

As an Information Security Manager you will lead the Access and Controls Authorization function within the Digital Identity Access Services (DIAS) team. You will shape IAM strategy, ensure compliance, and deliver secure, scalable access solutions for Amgen’s global enterprise.

Key responsibilities

• Lead IAM, provisioning, access governance, and partner security enablement initiatives across DIAS.
• Oversee onboarding/off‑boarding, role‑based access controls (RBAC), privileged access management (PAM) and least‑privilege models.
• Manage secure collaboration tools such as Microsoft 365, SharePoint, MOVEit MFT, AWS DataSync and related cloud technologies.
• Support external partner onboarding, secure B2B connectivity, file transfer and collaboration services.
• Ensure compliance with SOX, GxP, GDPR, HIPAA, NIST, ISO and internal security standards.
• Lead audits, access reviews, incident response support and remediation activities.
• Drive automation, operational metrics, KPI reporting and continuous process improvement.
• Mentor technical teams and guide strategic roadmap, vendor, and governance activities.

Required profile

• Proven experience leading IAM and access governance programs in a large, regulated environment.
• Strong knowledge of security and compliance frameworks (SOX, GxP, GDPR, HIPAA, NIST, ISO).
• Demonstrated ability to work cross‑functionally with Information Security, Privacy, Legal, HR and external vendors.
• Excellent problem‑solving mindset and ability to drive strategic initiatives.

Required skills

• Identity & Access Management (IAM)
• Role‑Based Access Control (RBAC)
• Privileged Access Management (PAM)
• Microsoft 365 and SharePoint
• MOVEit Managed File Transfer (MFT)
• AWS DataSync and cloud technologies
• Automation and KPI reporting tools