Sr Info Security Risk Analyst I - Hybrid

Syneos Health Careers; Madrid; Presencial; EUR 50.000 - 70.000; Jornada completa

Descripción de la vacante

An established industry player is seeking a passionate Information Security Risk Analyst to join their dynamic team. This role involves evaluating security exceptions, conducting risk assessments, and collaborating with cross-functional teams to enhance cybersecurity practices. The ideal candidate will have a solid understanding of risk management processes and the ability to stay ahead of emerging threats. Join a forward-thinking organization that values teamwork and innovation, and make a significant impact on cybersecurity strategies that protect vital information assets. If you are ready to take your career to the next level, this opportunity is perfect for you.

Formación

• 3+ years of experience in Information Security Risk Management.
• Strong knowledge of cybersecurity principles and risk assessment methodologies.

Responsabilidades

• Evaluate and manage security exception requests to ensure compliance.
• Conduct information security risk assessments and prepare reports.

Conocimientos

Information Security Risk Management

Cybersecurity Principles

Risk Assessment Methodologies

Analytical Skills

Communication Skills

Problem-Solving Skills

Decision-Making Skills

Educación

Bachelor's degree in Computer Science

Relevant Certifications (CISSP, CRISC, ISO 27001)

Herramientas

Microsoft Office (Excel, PowerPoint, Word)

Descripción del empleo

Join Our Team as an Information Security Risk Analyst!

Syneos Health is a leading fully integrated biopharmaceutical solutions organization built to accelerate customer success. We translate unique clinical, medical affairs and commercial insights into outcomes to address modern market realities.

Every day we perform better because of how we work together, as one team, each the best at what we do. We bring a wide range of talented experts together across a wide range of business-critical services that support our business. Every role within Corporate is vital to furthering our vision of Shortening the Distance from Lab to Life.

Discover what our 29,000 employees, across 110 countries already know:

WORK HERE MATTERS EVERYWHERE

Are you passionate about cybersecurity and ready to make a significant impact? We are looking for a talented Information Security Risk Analyst to join our dynamic team at Syneos Health. If you have a keen eye for detail, a deep understanding of security control frameworks, and a drive to stay ahead of the evolving threat landscape, we want to hear from you!

Job Responsibilities

1. Serves as a member of the working team for Risk Management within the Governance, Risk, and Assurance (GRA) function.
2. Evaluates and manages security exception requests, ensuring compliance with security standards and mitigating associated risks.
3. Conducts information security risk assessments of internal processes, and IT solutions as an information security risk subject matter expert.
4. Prepares security exception risk profile and reports to relevant stakeholders.
5. Collaborates with cross-functional teams to ensure risk management practices align with business objectives and compliance requirements.
6. Identifies, analyzes, assesses, monitors, and tracks risks in the information security risk register.
7. Monitors, tracks, and manages risk mitigations and exceptions to ensure cyber security policies and standards are established, implemented, and followed.
8. Collaborates with internal stakeholders (Security Operations, Technology Solutions, Privacy, Regulatory & Compliance, etc.) as part of the risk management program.
9. Participates in ad-hoc, non-systematic risk assessment requests.
10. Stays updated with the latest cybersecurity trends, emerging threats, and industry developments to provide proactive risk mitigation recommendations.

Qualifications

1. Bachelor's degree in computer science, Information Security, or a related field is required. Relevant certifications such as CISSP, CRISC, or ISO 27001 auditor will be considered as a plus.
2. Minimum 3 years' experience working as an Information Security Risk Analyst or in a similar role focused on information security risk management.
3. Possess strong process knowledge, and ability to design and/or improve risk management processes.
4. Experience in utilizing tools for risk profile data collection is desirable.
5. Good knowledge of cybersecurity principles, governance, and regulatory compliance.
6. Deep understanding of risk assessment methodologies, vulnerability management, and security control frameworks (e.g., NIST RMF and CSF, ISO 27001, COBIT).
7. Familiarity with security controls, technologies, and best practices to mitigate cyber risks.
8. Proficient in Microsoft Office (Excel, PowerPoint, Word).
9. Demonstrate sound judgment and decision-making skills when dealing with complex cybersecurity risks.
10. Strong communication and interpersonal skills to collaborate effectively with cross-functional teams and stakeholders.
11. Ability to work independently as well as collaboratively in a team environment, prioritize tasks, and manage time effectively.
12. Excellent analytical and problem-solving skills.