IT Security Analyst

SERB • Conshohocken, PA

1d • Hybrid

About The Position

SERB is a fast-growing specialty pharmaceutical company that equips healthcare providers worldwide with life-saving medicines for patients facing rare conditions and emergencies. For over 30 years we have consistently provided emergency medicines, medical countermeasures, and the world’s leading portfolio of antidotes. Today SERB has over 500 employees in 18 countries and group revenue in excess of €400m. With a strong presence in the US, Europe, and the Middle East, along with a global network of trusted distribution partners, we make a broad range of essential medicines available in over 100 countries. Having the right culture is as important to us as having the right portfolio. We are guided by our four values: We make patients our priority, We act with accountability and integrity, We work together as one team, We look for better ways forward. By expanding our reach through selective acquisitions and entering new markets, we’re not just supplying medicine; we’re improving the standard of care for more patients around the world.

We are looking for a detail-oriented IT security (cybersecurity) analyst to be responsible for desktop, mobile and network cybersecurity, troubleshooting incidents and implementing security policies and procedures. This individual will join an existing analyst and jointly be responsible for all aspects of the organisation’s IT security under the management and direction of the Group IT Director. This individual is expected to work at our Conshohocken, PA office on a hybrid schedule 3 days a week, with 2 work from home days.

Requirements

• Bachelor's degree in computer science, cybersecurity, or a related field.
• A minimum 5 years in a Pharmaceutical, FinTech or a similar industry
• Experience working in a team-oriented and collaborative environment.
• Excellent knowledge of current industry cybersecurity intelligence and approaches.
• Proven experience in the delivery of strategic projects and service delivery.
• Strong skills in the following technologies (Azure AD Hybrid, GPO’s, Intune, Cisco FW’s/Switches, Antimalware/AV, Mimecast, O365 Security, Defender)
• Passion for cybersecurity and IT in general.
• Exceptional customer service and delivery focus.
• Exceptional interpersonal skills with a focus on relationship building and listening to customers.
• Strong verbal and written communication skills (specifically by telephone, e-mail and messaging).
• Strong analytical and problem-solving abilities.
• The aptitude/ability to learn new technologies and approaches (training will be provided where required).
• The aptitude/ability to work in an organised manner, under pressure and methodically.
• Competent and organised with the ability to manage and prioritise workload, multi-task and manage a diverse mix of issues, responsibilities and challenges.

Nice To Haves

• Preference to a Certified Information Security Manager (CISM) or Certified Information Systems Security Professional (CISSP) or studying courses towards with a record of continuous attendance.
• Experience working in a highly regulated environment, laboratory or cleanroom is desirable.

Responsibilities

• Global responsibility for managing IT cybersecurity.
• Keep current with trends and issues in the IT industry, including current technologies and prices. Advise, counsel and educate executives and management on their competitive, compliance or financial impact.
• Updating software with the latest security patches and ensuring the proper defences are present for each network resource.
• Performing vulnerability and penetration tests, identifying and defending against threats.
• Analysing security requirements and recommending improvements.
• Monitoring network traffic for suspicious behaviour.
• Developing network policies and authorization roles and defending against unauthorized access, modifications and destruction.
• Consulting with staff, managers and executives about best security practices and providing technical advice.
• Advising on the configuration of and supporting security tools, such as firewalls and anti-virus software.
• Training staff to understand and use security protocols
• Ensure technical implementations and timelines are aligned with ongoing business needs and based on best practices and/or SERB standards.
• Direct and indirect support of IT service desk and ticket management as an escalation point.
• Ensure continuous delivery of IT services through oversight of service level agreements with end users and the monitoring of IT systems performance.
• Oversight of IT security, audit compliance and remediation.
• Responsible for the management of external Cyber audits of the SERB IT Infrastructure and Security Program
• Manage the 24x7 SOC/SIEM relationship with the responsible vendor.
• Remediate threats and monitor Defender, XDR and co-ordinate responses and communications.
• Escalate any security issues to the Group Head of IT and/or CFO
• Assess, communicate and mitigate risks associated with IT investment and operation.
• Manage and perform regular Cyber Phishing campaigns to determine the resilience and training of the users.
• Ensure that IT Policies are updated and work with HR, Legal and IT to ensure compliance.
• Ensuring that all interactions and engagements are carried out with the highest ethical and professional standards and that all work is accomplished with quality and in accordance with SERB values
• To carry out other reasonable tasks as required by the Group IT Director.

Benefits

• Hybrid Working
• Vacation, Personal and Sick time
• 15 Paid Company Holidays
• Medical, Dental, Vision and other Voluntary benefits
• Paid Parental Leave
• Tuition Assistance
• Discretionary Bonus Plan
• Competitive 401(k), $1 for $1 up to 6% of pay. The safe harbour match is vested immediately. In addition, SERB also offers a discretionary match of up to 4% of pay which vests 20% a year for 5 years.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level