Cybersecurity Analyst –IAM ID Verification & External Collaborators

Roche; Madrid; Presencial; EUR 40.000 - 60.000; Jornada completa

Descripción de la vacante

Roche is seeking a Cybersecurity Analyst in Madrid, Spain, responsible for investigating security incidents and performing vulnerability assessments. The role emphasizes continuous improvement and the ability to manage cybersecurity requirements efficiently.

Ideal candidates will possess relevant cybersecurity knowledge, strong analytical skills, and experience in stakeholder management. You will contribute actively within security product teams, engaging with stakeholders, and ensuring alignment with security objectives.

Formación

• Experience conducting stakeholder interviews and synthesizing requirements.
• Ability to independently handle less complex cybersecurity tasks.
• Experience in vulnerability assessments.

Responsabilidades

• Investigate security incidents and perform vulnerability assessments.
• Manage requirements for specific small-scale problems.
• Develop tailored communications for security tasks.

Conocimientos

Analytical skills

Cybersecurity knowledge

Stakeholder management

Usability analysis

Educación

Knowledge of relevant business domains

Descripción del empleo

Position

At Roche you can show up as yourself, embraced for the unique qualities you bring. Our culture encourages personal expression, open dialogue, and genuine connections, where you are valued, accepted and respected for who you are, allowing you to thrive both personally and professionally. This is how we aim to prevent, stop and cure diseases and ensure everyone has access to healthcare today and for generations to come. Join Roche, where every voice matters.

Job Description

The Cybersecurity Analyst investigates security incidents, performs vulnerability assessments, and contributes to improving security operations.

You will be capable of independent work on defined tasks, independently handling less complex tasks and contributing to various stages of the analysis lifecycle. By taking ownership of delivering well‑defined requirements and supporting the design of feasible security solutions, you will proactively identify solution‑level issues and maintain a mindset of continuous improvement within the security domain.

Job Responsibilities / Scope

• Independently handles less complex tasks and provides input to solution design by defining and managing requirements for small‑scale problem areas.
• Focuses on understanding the problem domain, recommending solution options, and proactively identifying solution‑level issues, gaps, or inefficiencies to improve products or processes.

Accountability / Problem Solving

• Takes ownership of delivering well‑defined requirements and supporting the design of feasible solutions for specific features or components.
• Independently analyzes less complex security technical problems, defines problem scope, contributes to identifying root causes, and provides solutions to a broad range of difficult problems.
• Evaluates change and technology impacts with increasing accuracy, diagnoses gaps, and applies analytical and logical reasoning independently to identify discrepancies and challenge assumptions.

Stakeholder Management

• Identifies key business, technical, and security stakeholders for assigned tasks, analyzing their needs and interests regarding security posture and risk.
• Primarily interacts within security product teams/squads and across Security Operations functions, while establishing rapport and managing realistic security expectations.
• Develops and delivers tailored communication for security tasks and incident updates, facilitates meetings, and proactively engages with stakeholders to elicit, clarify, and validate security requirements.

Impact / Strategy

• Contributes to projects or workgroups by providing well‑analyzed requirements and supporting the design of solutions that align with business objectives within their specified area.
• Demonstrates growing autonomy and expertise within their specific domain by translating requirements into a strategic plan with supervision, and may identify opportunities for minor process improvements within their immediate scope.

Complexity

• Works on a product or larger contexts, handling requirements and analysis for specific features or components.
• Can navigate moderate levels of complexity in requirements and stakeholder landscapes.
• Begins to understand sources of influence and analyze business problems/opportunities within this product context, starting to map basic interconnections.

Business/Technical Ability

• Possesses a working knowledge of the relevant business domain and supporting technologies.
• Understands sources of influence, comprehending internal and external factors affecting the problem space, and is capable of identifying and analyzing basic business problems or opportunities holistically.

Qualifications

Education / Experience

• Working knowledge of relevant business domains and supporting cybersecurity technologies.
• Experience in conducting stakeholder interviews, synthesizing requirements, and mapping/analyzing current processes.
• Demonstrated ability to independently handle less complex tasks and contribute to various stages of the security and business analysis lifecycle.

Technical Skills

• Ability to apply tools, principles, concepts, and techniques related to requirements, data, usability, and process analysis in practical scenarios.
• Experience investigating security incidents, performing vulnerability assessments, and managing requirements for small‑scale problem areas.
• Skill in evaluating change and technology impacts with increasing accuracy, and breaking down complex technical concepts with minimal guidance.

Additional Qualifications

• A mindset of continuous improvement with a proactive approach to identifying solution‑level issues, gaps, or inefficiencies.
• Strong analytical and logical reasoning skills to identify discrepancies, challenge assumptions, and confidently present solutions.

Roche is an Equal Opportunity Employer.