Dir, IT Risk Management

Job Category: IT/Software Development Company: Baxter Healthcare Reference Code: 31163BR Dir, IT Risk Management Baxter International Inc., assists healthcare professionals and their patients with the treatment of complex medical conditions, including cancer, hemophilia, immune disorders, kidney disease and trauma. The company applies its expertise in medical devices, pharmaceuticals and biotechnology to make a meaningful difference in patients' lives. Baxter Healthcare is seeking an experienced executive to lead the Global IT Risk Management Organization (RMO). This executive will develop the risk management strategy, risk assessment philosophy and operational risk management processes for Global IT in partnership with the CIO and as a member of the IT Global Leadership Team. This global, leadership role requires an individual with sound judgment and the ability to assess the likelihood and impact of risk elements including Regulatory/Statutory, Financial, Technical and Security for Global IT applications and infrastructure. In partnership with the other Global IT teams, the IT RMO organization ensures that risks are assessed and managed, so effective IT solutions can be implemented and supported that address and resolve business problems. The Director of IT Risk Management will also establish relationships with key Baxter internal and external Quality and Audit leaders. Those relationships will extend to the organizations that assess the effectiveness of Global IT controls and risk management of Baxter IT solutions. Key Responsibilities: Develop the RMO long-range strategy with business and IT leadership. This risk management strategy will include enterprise integration of risk management for regulatory/statutory, financial, technical and security elements including robust disaster recovery and/or business continuity plans. Partner with the CIO and Baxter IT Leadership to assess and manage risk for large scale IT programs like ERP and technical replatforming (network, data center, etc). Partner with the CIO and Baxter IT Leadership to conduct regular Management Reviews and institute enterprise management controls to assess and manage risk. Create a culture of enterprise risk management in Global IT including tools, education and skill development to operationalize effective risk management processes and practices. Provide overall direction and leadership for the RMO organization with robust talent and organization development plans for the people in the RMO. Develop relationships with key Baxter internal and external Quality and Audit leaders. Manage the relationship and coordinate activities with their organizations (audits, reports, etc) and the broader IT organization to ensure the effectiveness of Global IT controls and risk management of Baxter IT solutions. Lead the operations of the RMO including validation, risk vigilance and compliance assessment, audit facilitation & response, security and risk surveillance and ownership for key policies, procedures, documents and standards that meet internal and external requirements (i.e SoX, HIPAA, GxP, etc). Define the appropriate risk processes and standards and support the implementation of new standards in close collaboration with other IT teams to allow Baxter to efficiently and effectively manage its IT assets (applications and infrastructure solutions). Establish collaborative working relationships with the businesses, functions and regions to ensure that IT risks are managed and IT solutions align with the business strategy. Form and lead sub-teams comprised of individuals from Baxter's businesses, functions, IT team and strategic vendors to address a specific business goal, risk or solution. QUALIFICATIONS: 12+ years of relevant experience including several executive roles. During your recent history, a proven ability to assess, manage and translate risks from business into IT and vice versa. Your experience must include leadership at a global level with significant SoX exposure, audit responsibility or computer system validation knowledge and IT/business regulatory compliance responsibility. Significant IT security or IT application and policy/governance experience also desired. Excellent communication skills across IT and with businesses, functions and regions; being able to formulate vision and translate vision into execution with concrete standards and solutions. Ability to engage senior business and IT executives. Excellent understanding of current IT, risk management and regulatory trends and their impact on business strategies including: key vendors, audit organization and their impact on business strategies including and trends in Computer Validation, IT Security, SoX & Regulatory Compliance. Track record of execution on large scale programs that meet quality, time and budget requirements. Proven ability to manage multiple priorities in a global matrix organization Significant responsibility in a Fortune 500 and/or "Big 4 type" consulting/accounting firm expected. Past experience in Healthcare sector is desirable. Proven track record of sound judgment including abstract thinking and a good balance between an academic and pragmatic approach. Strong people skills, collaborative ability to work with non-IT stakeholders inside and outside of Baxter, able to mentor team members, build and lead teams with diverse backgrounds. Candidate must have a Bachelor's degree. A Master's degree in computer sciences, engineering, or business is highly desirable. As a global leader dedicated to building the best team in health care, Baxter offers competitive compensation and full benefits. To view other opportunities at Baxter, please visit our Careers@Baxter site. EOE M/F/D/V.