Risk & Control Assurance Analyst

At Takeda, we are leading digital evolution and global transformation. By building innovative solutions and future-ready capabilities, we are meeting the need of patients, our people, and the planet.

Mexico City has been selected to be home to Takeda’s recently launched Innovation Capability Center thanks to its international recognition in qualified and experienced talent in the data, digital and technology fields. We invite you to join our digital transformation journey.

In this role, you will have the opportunity to boost your skills and become the heart of an innovative engine that is contributing to global impact and improvement.

At Takeda’s ICC we Unite in Diversity 

Takeda is committed to creating an inclusive and collaborative workplace, where individuals are recognized for their backgrounds and abilities they bring to our company. We are continuously improving our collaborators journey in Takeda, and we welcome applications from all qualified candidates. Here, you will feel welcomed, respected, and valued as an important contributor to our diverse team. 

OBJECTIVES/PURPOSE

• Execute the full lifecycle of information security and data privacy third-party risk assessments as needed, either individually or through available resources, within the region
• Assist and execute control assessment activities to identify control effectiveness, maturity, and areas for improvements within region.
• Collaborate with internal third-party relationship owners and third-party representatives to recommend necessary security and privacy controls to effectively mitigate risks to Takeda.
• Assist in promoting third-party risk management processes across business lines to help influence a strong culture of proactive awareness for third-party security risks.
• Improve and help foster a positive end user experience with business stakeholders by enhancing our program to accommodate an agile business environment.

ACCOUNTABILITIES

• Execute the full lifecycle of information security and data privacy third-party risk assessments as needed, either individually or through available resources
• Collaborate with internal third-party relationship owners or third-party representatives in their efforts to provide responses to the security and privacy risk assessment questionnaire.
• Assist and execute regional control assessment activities to identify control effectiveness, maturity, and areas for improvements.
• Effectively translate third-party responses to assessment questionnaire, using sound judgement, into concise risk exposure reporting for delivery to internal stakeholders
• Partner with internal third-party relationship owners and third-party representatives to recommend necessary security and privacy controls to effectively mitigate risks to Takeda.
• Ensure robust tracking and remediation of third-party security and privacy risk exposures identified through assessment processes.
• Provide any necessary training and awareness related to the third-party security process.
• Contribute to the gathering and distribution of periodic program metrics and/or dashboards.
• Mentor and train new risk analysts

Dimensions and Aspects

Technical/Functional

• Experience in evaluating third parties for the presence of fundamental information security and data privacy controls.
• Experience conducting risk assessments and applying concepts of inherent and residual risk to draw appropriate conclusions and articulate the same to non-technical audiences.
• Ability to effectively negotiate appropriate remediation of security gaps with third party representatives to ensure protection of Takeda information.

Leadership

• Ability to effectively manage conflicting priorities.
• Develops strong relationships with other teams across the organization.

Decision-making and Autonomy

• Assists the Regional Information Risk Assurance Lead with global risk and control assurance activities and regional execution.
• Responds to risk stakeholders in a timely manner, engages colleagues when needed, and escalates when necessary.

Education, Behavioral Competences and Skills

• Essential –
  • Bachelor’s degree or equivalent
  • 1-3 years of experience in information security and/or third-party risk management
  • Ability to manage multiple workstreams simultaneously.
  • Ability to think critically and analytically.
  • Capable of effectively managing shifting priorities
  • Strong communication, interpersonal, presentation, and organizational skills
  • Comfortable operating in and navigating a global organization where risk stakeholders can be located across geographies and time zones.
• Desired –
  • Security certification(s) (CISSP)
  • ServiceNow GRC experience

What Takeda’s ICC Can Offer You

At Takeda, you take the lead on building and shaping your own career.

Joining the ICC in Mexico City will give you access to high-end technology, continuous training and a diverse and inclusive network of colleagues who will support your career growth.

It is our priority to provide competitive compensation and a benefit package that bridges your personal life with your professional career. Amongst our benefits are:

• Competitive Salary + Performance Annual Bonus
• Monthly Supermarket and Food Vouchers
• Flexible Working Schemes
• Comprehensive Healthcare Insurance Plans: Life, Medical, Dental & Vision
• Additional Time Off
• Diversity, Equity, and Inclusion Programs

#Li-Hybrid