IT Security Risk and Compliance Analyst II

United Therapeutics•Silver Spring, MD

3d•Hybrid

About The Position

In this role, you'll collaborate closely with cross-functional teams to design, implement, and optimize creative and cutting-edge IT security, risk, and compliance programs. You'll be pivotal in driving security initiatives forward—coordinating, tracking, and reporting on key efforts to ensure alignment with our risk strategy and compliance goals. If you're passionate about impacting cybersecurity while working on innovative solutions, this is your opportunity! Join a dynamic team dedicated to securing the future of United Therapeutics. Support the organization's Information Security, Risk and Compliance programs (e.g., Vulnerability Management Program) to effectively address information technology risks in alignment with the organization's risk appetite and to meet compliance requirements Serve as a consultant to the organization to ensure understanding of and adherence to existing security, risk, and compliance principles and requirements Develop and analyze reports and alerts to identify gaps and propose changes to improve the organization's security, risk and compliance posture Evaluate existing and proposed technology solutions and provide recommendations and guidance to ensure business and security needs are adequately met Participate in risk assessments, perform risk analysis, and partner with stakeholders to create treatment plans that achieve an acceptable level of risk Participate in cross-functional teams, including third parties, in security, risk and compliance initiatives and driving them through to completion Partner with other IT teams to successfully achieve organizational goals and objectives Participate in incident response activities for all potential and declared IT security incidents and conduct root cause analysis and lessons learned reviews to ensure continuous process improvement Monitor advancements in information privacy and security technologies to ensure organizational adaptation and compliance Assist with creating and updating IT security and compliance documentation Review and investigate security related cases, alerts and events Monitor and provide oversight of IT security tools and platforms

Requirements

H.S. Diploma or General Education Degree with at least 6 years of relevant work experience OR an Associate’s degree with at least 4 years of relevant work experience OR a Bachelor’s degree with at least 2 years of relevant work experience
At least 2 years of experience in information security
Superior organizational, prioritization, and time management skills
Ability to maintain a high level of integrity and confidentiality
Demonstrated problem-solving ability and analytical skills
Ability to interact, listen, and communicate effectively, both written and verbal with all stakeholders

Nice To Haves

Experience working in the pharmaceutical/biotechnology industry
Experience in risk management
Experience with managing change control processes
SANS GSEC
Root cause analysis skills

Responsibilities

Support the organization's Information Security, Risk and Compliance programs (e.g., Vulnerability Management Program) to effectively address information technology risks in alignment with the organization's risk appetite and to meet compliance requirements
Serve as a consultant to the organization to ensure understanding of and adherence to existing security, risk, and compliance principles and requirements
Develop and analyze reports and alerts to identify gaps and propose changes to improve the organization's security, risk and compliance posture
Evaluate existing and proposed technology solutions and provide recommendations and guidance to ensure business and security needs are adequately met
Participate in risk assessments, perform risk analysis, and partner with stakeholders to create treatment plans that achieve an acceptable level of risk
Participate in cross-functional teams, including third parties, in security, risk and compliance initiatives and driving them through to completion
Partner with other IT teams to successfully achieve organizational goals and objectives
Participate in incident response activities for all potential and declared IT security incidents and conduct root cause analysis and lessons learned reviews to ensure continuous process improvement
Monitor advancements in information privacy and security technologies to ensure organizational adaptation and compliance
Assist with creating and updating IT security and compliance documentation
Review and investigate security related cases, alerts and events
Monitor and provide oversight of IT security tools and platforms