Collaborate with Innovative 3Mers Around the World
Choosing where to start and grow your career has a major impact on your professional and personal life, so it's equally important you know that the company that you choose to work at, and its leaders, will support and guide you. With a diversity of people, global locations, technologies and products, 3M is a place where you can collaborate with 93,000 other curious, creative 3Mers.
"3M's culture is driven by curious, spirited and collaborative people who are constantly asking 'What if?' And the many talents of 3Mers around the globe have me incredibly excited about what's to come next." - Kristen Ludgate, senior vice president of Human Resources at 3M
This position provides an opportunity to transition from other private, public, government or military environments to a 3M career.
The Impact You'll Make in this Role
The person hired for the position of Risk Program Manager will support the various risk activities for the Business Group by forming partnerships with IT groups, business groups, project teams and external vendors, as well as facilitate security and compliance assessments on applications, systems and business areas. This position will play a critical role in continuously improving the 3M HCBG internal security and compliance posture.
Primary Responsibilities include but are not limited to the following:
Support and execute the implementation and maintenance of IT Certification Assessments (SOC 2, HITRUST, and ISO)
Affirm and advance various stakeholder's understanding of, and their responsibilities with respect to, the Security Frameworks related to HITRUST, ISO, NIST and HIPAA
Manage multiple concurrent Gap Assessments and control implementation programs against HCBG Systems and Products.
Drive visibility and standardization for HCBG Security and Privacy programs via data gathering and reporting
Maintains a strong process owner focus and "customer mindset" in developing and maintaining internal client deliverables orchestration experience
Ability to work independently, with limited required direction and guidance
Possesses excellent verbal and written communication skills and strong analytical abilities
Assist remediation planning, governance, and risk treatment activities as required
Contribute "best practices" in terms of findings, checklists, templates, testing methods, and techniques to support and advance a "best of breed" Security Assessment program
Provide periodic, dynamic updates on security assessment analysis and security posture with an emphasis on deliverables
Provide both generalized and discrete input about security standards and policy for IT plans, roadmaps, and prioritization of projects
Your Skills and Expertise
To set you up for success in this role from day one, 3M requires (at a minimum) the following qualifications:
Bachelor's Degree or higher (completed and verified prior to start) from an accredited university OR High School Diploma/GED from an accredited institution and a minimum of twelve (12) years of experience in risk, security or Audit working in lieu of the bachelor's degree education requirement
Seven (7) years experience working in data privacy or security
Five (5) years of IT Security or IT Assurance experience in large, highly regulated organizations, involving assessments for applications, infrastructure, and vendors / third parties
Additional qualifications that could help you succeed even further in this role include:
An advanced certification such as in Risk (CRISC), Security (CISSP, CISM, GCEH) or Audit (CISA).
Minimum five (5) years of direct HITRUST, SOC2, and ISO experience
Experience with IOT, OT, and Medical Device Risk and Security
Travel: Occasional travel may be required
Relocation Assistance: May be authorized
Location: St. Paul, MN or Remote
Must be legally authorized to work in country of employment without sponsorship for employment visa status (e.g., H1B status).
Supporting Your Well-being
3M offers many programs to help you live your best life - both physically and financially. To ensure competitive pay and benefits, 3M regularly benchmarks with other companies that are comparable in size and scope.
Resources for You
For more details on what happens before, during and after the interview process, check out the Insights for Candidates page at 3M.com/careers.
Learn more about 3M's creative solutions to the world's problems at www.3M.com or on Twitter @3M. Responsibilities of this position include that corporate policies, procedures and security standards are complied with while performing assigned duties. 3M is an equal opportunity employer. 3M will not discriminate against any applicant for employment on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, or veteran status.
Please note: your application may not be considered if you do not provide your education and work history, either by: 1) uploading a resume, or 2) entering the information into the application fields directly.
Please access the linked document by clicking here, select the country where you are applying for employment, and review. Before submitting your application you will be asked to confirm your agreement with the terms.
Internal Number: R01041777
Here, you matter. You inspire.
Here, you go.
At 3M, inspiration happens daily. Here, science is how the
magic happens. Except it’s not magic, it’s the right science
applied the right way by the people of 3M. Here, your ideas
help shape everyday lives around the globe.
• We nurture the world around us
• We act with uncompromising integrity
• We encourage a culture of coaching and development
• We are endlessly inquisitive
• We create with purpose
• We believe in the power of the whole
3M technology advancing every company
3M products enhancing every home
3M innovation improving every life
3M is all around you: Nearly 90,000 employees, Operations in 70 countries. $32+ Billion in Sales. 100,000+ patents, Products sold in 200 countries, and 5 diverse business groups : Consumer, Health Care, Industrial, Safety & Graphics, and Electronics & Energy.