Senior Security Analyst - UK - Remote

worldwide.com; United Kingdom; Remote; GBP 80,000 - 100,000; Full time

Job summary

An innovative organization is seeking a Senior Security Analyst to enhance its cybersecurity governance and risk management practices. In this pivotal role, you will conduct comprehensive risk assessments, collaborate with various departments to implement security policies, and prepare insightful reports on compliance and risk mitigation. This position not only offers an opportunity to make a significant impact on the organization's security posture but also to work in a dynamic and supportive environment where diverse perspectives are valued. If you are passionate about cybersecurity and eager to contribute to meaningful change, this role is perfect for you.

Qualifications

• 5+ years of experience in cybersecurity governance and risk assessment.
• Certified in CRISC or CISA, with aspirations for CISSP certification.

Responsibilities

• Conduct risk assessments to identify potential threats and recommend mitigation strategies.
• Collaborate with stakeholders to draft and implement security policies.

Skills

Analytical Skills

Problem-Solving

Cybersecurity Principles

Governance Frameworks

Risk Management Practices

Communication Skills

Education

Bachelor’s Degree in IT

4-year equivalent degree in Cybersecurity

Tools

ISO 27001/27002

CIS CSC

GDPR

HIPAA

Job description

Senior Security Analyst - UK - Home-based

Senior Security Analyst - UK - Home-based

Apply remote type Remote locations Virtual United Kingdom time type Full time posted on Posted Yesterday job requisition id JR100638

Who we are

We’re a global, midsize CRO that pushes boundaries, innovates and invents because the path to a cure for the world’s most persistent diseases is not paved by those who play it safe. It is built by those who take pioneering, creative approaches and implement them with quality and excellence.

We are Worldwide Clinical Trials, and we are a global team of over 3,500+ experts, bright thinkers, dreamers and doers and, together, we are changing the way the world experiences CROs – in the best possible way.

Our mission is to work with passion and purpose every day to improve lives and we are looking for others who value this same pursuit.

Why Worldwide

We believe everyone plays an important role in making a world of difference for patients and their caregivers. From our hands-on, accessible leaders, to our cohesive and supportive teams, we are committed to enabling professionals from all backgrounds and experiences to succeed. We prioritize cultivating a diverse and inclusive environment that continues to promote collaboration and creativity. We are proud to be a workplace where people thrive by being themselves and are inspired to do their best work every day. Join us!

What the Information Technology Department does at Worldwide

The IT department is made up of seasoned professionals united in one common goal: to keep Worldwide’s technical infrastructure operating at the highest levels for our employees and our customers. We are a global team comprised of numerous professionals including cyber security, artificial intelligence, IT helpdesk, application support, and more.

What you will do

• Conduct risk assessments to identify and evaluate potential threats, calculating impact and likelihood, and recommending risk mitigation strategies.
• Handle Requests for Information, Audit Questionnaires, and third-party risk evaluations.
• Collaborate with stakeholders across Clinical Operations, IT, Legal, and others to draft, refine, and implement security policies aligned with industry standards (e.g., ISO, NIST, CIS CSC) and regulatory requirements (e.g., GDPR, HIPAA).
• Prepare and deliver reports on the organization’s risk profile, compliance status, and progress toward risk mitigation objectives.
• Identify opportunities to improve GRC processes and implement practical enhancements to streamline workflows.

What you will bring to the role

• Strong analytical and problem-solving skills with the ability to assess risks and develop actionable recommendations.
• Knowledge of cybersecurity principles, governance frameworks, and risk management practices.
• In-depth knowledge of healthcare/clinical research compliance frameworks and their intersection with cybersecurity governance.
• Ability to communicate effectively with technical and non-technical stakeholders, including preparing clear and concise reports.
• Experience in GRC within a clinical research organization (CRO) or similar regulated environment is highly desirable.
• Certified in Risk and Information Systems Control (CRISC), Certified Information Systems Auditor (CISA) or similar certification is beneficial. Aspiration or movement towards obtaining the CISSP certification is a plus.

Your experience

• Bachelor’s Degree or 4-year equivalent degree in IT, Cybersecurity, or a related field.
• Minimum of 5 years of experience in cybersecurity governance, risk assessment, or compliance, preferably in a corporate setting.
• Understanding of key industry standards, frameworks, and regulations pertinent to cybersecurity governance such as ISO 27001/27002 and CIS CSC.
• Strong written and verbal communication skills, able to articulate complex issues in a clear and concise manner.
• Experience with third-party risk management, identifying risk in identity and access management, and compliance monitoring.

We love knowing that someone is going to have a better life because of the work we do.