IT Security Analyst II

Veristat•Massachusetts, MA

8d•$89,000 - $98,000•Remote

About The Position

The IT Security Analyst II serves as the organization’s primary internal coordinator for cybersecurity procedures, monitoring, reporting, and continuous improvement. The role oversees the managed service provider’s security services, reviews its work and recommendations, coordinates internal responses, and ensures identified risks and required actions are addressed. The analyst manages recurring security reviews and reporting, incident and vulnerability follow-up, documentation, and customer security audits. In support of the CIO and IT Manager, the analyst presents security findings, risks, and recommended strategies to senior management, customers, and internal staff.

Requirements

At least 3 years of experience in cybersecurity, IT operations, security operations, systems administration, IT risk, compliance, or a related technical role.
Practical understanding of common cybersecurity threats, technologies, controls, and operational practices.
Experience working with an MSP, managed security provider, technology vendor, or outsourced IT organization.
Ability to critically evaluate reports, investigations, recommendations, and technical work performed by external providers.
Experience reviewing security alerts, dashboards, vulnerability findings, logs, or reports.
Strong written documentation, organization, and follow-through.
Experience preparing reports, presentations, audit responses, or security communications.
Sound judgment regarding security investigation, prioritization, and escalation.
Ability to work independently and communicate effectively in a remote environment.
Availability during normal Eastern Time business hours, with reasonable flexibility for incidents, audits, or project needs.

Nice To Haves

Experience in life sciences, biotechnology, pharmaceuticals, medical devices, healthcare, clinical research, or another regulated organization.
Understanding of requirements such as GxP, HIPAA, FDA regulations, 21 CFR Part 11, validated systems, or data-integrity practices.
Experience supporting audits, regulatory inspections, or formal control assessments.
Project-coordination experience involving security technology, compliance, or process improvements.
Relevant certifications such as Security+, CySA+, SSCP, CISA, GIAC, or Microsoft security credentials.

Responsibilities

Coordinate internal cybersecurity procedures, monitoring, reporting, and continuous improvement.
Oversee the managed service provider’s security services and critically review its work and recommendations.
Coordinate internal responses and ensure identified risks and required actions are addressed.
Manage recurring security reviews and reporting.
Follow up on incidents and vulnerabilities.
Maintain security documentation.
Support customer security audits.
Present security findings, risks, and recommended strategies to senior management, customers, and internal staff.