{"id":3328529,"url":"https://alion.io/job/merck-co-technical-information-security-lead","title":"Technical Information Security Lead","company":{"id":3768,"name":"Merck & Co.","domain":"msd.com","url":"https://alion.io/company/msd","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":98,"open_postings":132,"ghost_share":0.03,"stale_share":0.114,"repost_share":0.174,"time_to_fill_p50_days":16,"computed_at":"2026-11-01T06:10:25Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Prague, Czech Republic"],"countries":["CZ"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":48000,"max_usd":123000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":753},"experience_years_min":null,"visa_sponsorship":true,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Agile","optional":false},{"name":"CI/CD","optional":false}],"status":"closed","first_seen_at":"2026-10-26T00:00:00Z","employer_posted_date":"2026-10-26","last_verified_at":"2026-10-29T13:05:25Z","board_verified":false,"closed_at":"2026-10-29T13:05:25Z","days_open":3,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":3},"description":"Job Description\nThe Position\nTechnical Information Security Lead for Mergers, Acquisitions & Divestitures (MA&D)\nThe TISL for MA&D ensures technology and cybersecurity risks are identified, managed, and mitigated throughout the end-to-end integration of acquired companies into The Company’s technology environment. The role partners with IMO, Enterprise Risk, IT, Security, and business stakeholders to enable safe, efficient integrations aligned with Our policies and deal objectives.\n What will you do?\nIntegration Risk Assessment: Perform IT and cybersecurity risk assessments at deal close and through each phase; map critical systems, data flows, identities, access models, and third-party dependencies to The Company’s integration blueprint; define risk acceptance criteria and tolerances.\nContinuous Monitoring: Establish milestone-based checkpoints (Day 1, TSA, cutovers, migrations, identity consolidation, decommissioning); track key risk indicators; maintain a live risk register per acquisition.\nIntelligence-Driven Evaluation: Apply The Company’s threat intelligence, vulnerability advisories, and sector developments to active integrations; quantify impact/likelihood; provide timely decision support.\nMitigation Strategy: Recommend pragmatic, time-bound controls that reduce material risk without unnecessary tooling; prioritize lightweight measures (hardening, segmentation, access containment, monitoring); define interim and final control states.\nGovernance & Alignment: Embed risk criteria in cutover plans, TSAs, and decommission schedules; drive risk-based go/no-go decisions; present clear risk narratives and document decisions.\nThird-Party & Data Risk: Assess inherited vendors and external integrations; advise on continuity/exit; ensure data classification, retention, residency, privacy, and regulatory compliance during migrations; coordinate logging and evidence for audit.\nIncident Preparedness & Response: Ensure coverage for acquired environments (roles, runbooks, escalation); lead/support triage and containment; capture lessons learned.\nDocumentation & Reporting: Maintain standardized frameworks and templates; deliver concise dashboards/status reports; track control effectiveness and residual risk to integration completion.\nContinuous Improvement: Identify patterns across acquisitions; develop reusable controls and playbooks; refine M&A due diligence, TSA language, and integration.\n Qualifications, Skills & Experience Required\nBachelor’s degree in information technology, cybersecurity, computer science, or related field (or equivalent experience).\nRelevant security or risk certifications preferred (CISSP, CISM, CISA, CRISC, GSEC) but not required.\nProject management and data governance, data science or privacy credentials are beneficial.\nExperience in cybersecurity, IT risk management, IT compliance, IT audit, or related fields.\nExperience performing risk assessments and advising technical and business stakeholders on security controls and remediation.\nPractical experience with cloud, application, platform, software delivery, AI or data and analytics security.\nExperience with SDLC and agile/DevOps practices, integrating security controls into CI/CD pipelines.\nExperience in regulated industries is preferred but not mandatory.\nTechnical depth in security controls, threats, vulnerabilities, and mitigation strategies across technology, platforms, AI and data.\nStrong business acumen with the ability to explain technical risk in business terms and produce clear, actionable recommendations.\nProven problem-solving and analytical skills; able to prioritize based on risk and value.\nStrong stakeholder management and communication skills; able to influence without formal authority.\nComfortable working independently and within cross-functional teams; adaptable in a fast-paced environment.\nHigh emotional intelligence and a collaborative mindset.\n What we offer\nExciting work in a great team, global projects, international environment.\nOpportunity to learn and grow professionally within the company globally.\nHybrid working model, flexible role pattern (e.g., even 80% full-time is possible in justified cases). \nPension and health insurance contributions. \nInternal reward system plus referral programme. \n5 weeks annual leave, 5 sick days, 15 days of certified sick leave paid above statutory requirements annually, 40 paid hours annually for volunteering activities, 12 weeks of parental contribution. \nCafeteria for tax free benefits according to your choice (meal vouchers, sport, culture, health, travel, etc.), Multisport Card. \nVodafone, Raiffeisen Bank and Foodora discount programmes. \nUp-to-date laptop and iPhone.\nParking in the garage, showers, refreshments, massage chairs, library, music corner.\nCompetitive salary, incentive pay, and many more. \nReady to take up the challenge? Apply now!\nKnow anybody who might be interested?Refer this job!\nAdditional location(s) Compensation Information:\nRequired Skills:\nBusiness Acumen, Computer Science, Cybersecurity, Cybersecurity Risk Management, Data Governance, Data Management, Information Security, Information Technology (IT) Risk Management, IT Compliance Management, IT Risk Assessments, IT Risk Governance, IT Risk Response and Reporting, Knowledge of regulations and frameworks, Mergers and Acquisitions (M&A), Risk Assessments, Security Controls, Stakeholder Communications, Stakeholder Management, Technical Advice, Technology RiskPreferred Skills:\nCurrent Employees apply HERE\nCurrent Contingent Workers apply HERE\nSearch Firm Representatives Please Read Carefully\nMerck & Co., Inc., Rahway, NJ, USA, also known as Merck Sharp & Dohme LLC, Rahway, NJ, USA, does not accept unsolicited assistance from search firms for employment opportunities. All CVs / resumes submitted by search firms to any employee at our company without a valid written search agreement in place for this position will be deemed the sole property of our company. No fee will be paid in the event a candidate is hired by our company as a result of an agency referral where no pre-existing agreement is in place. Where agency agreements are in place, introductions are position specific. Please, no phone calls or emails.\nEmployee Status:\nRegularRelocation:\nDomesticVISA Sponsorship:\nNoTravel Requirements:\nNo Travel RequiredFlexible Work Arrangements:\nHybridShift:\nNot IndicatedValid Driving License:\nNoHazardous Material(s):\nn/aJob Posting End Date:\n10/30/2026*A job posting is effective until 11:59:59PM on the day BEFORE the listed job posting end date. Please ensure you apply to a job posting no later than the day BEFORE the job posting end date.","description_format":"text","description_chars":6653,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Annual leave","Cafeteria","Flexible schedule","Health insurance","Hybrid work"],"hiring_locations":[{"name":"Czech Republic","iso":"CZ","kind":"country"}],"hiring_excludes":[],"relocation_offered":true,"industries":["Veterinary Medicine","Vaccines","Information Security","Biologics & Biosimilars"],"lifecycle":[{"event":"open","at":"2026-10-27T11:13:17Z"},{"event":"close","at":"2026-10-29T13:05:25Z"}],"visa":[],"liveness":null,"pay":null,"html_url":"https://alion.io/job/merck-co-technical-information-security-lead","json_url":"https://alion.io/job/merck-co-technical-information-security-lead.json","meta":{"generated_at":"2026-11-01T20:40:27Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":31626,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-02T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3768},"rest":"https://alion.io/mcp/rest/get_company?id=3768"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fmerck-co-technical-information-security-lead"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fmerck-co-technical-information-security-lead"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fmerck-co-technical-information-security-lead"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/merck-co-technical-information-security-lead\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fmerck-co-technical-information-security-lead"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3328529}},{"tool":"search_jobs","arguments":{"company":"msd.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3328529},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}