Senior Security Analyst - UK - Remote

Worldwide Clinical Trials; United Kingdom; Remote; GBP 45,000 - 75,000; Full time

Job summary

Join a pioneering global organization dedicated to improving lives through innovative clinical research. This role in the IT department involves conducting risk assessments, developing security policies, and enhancing governance processes. You'll collaborate with diverse teams to ensure compliance with industry standards while fostering an inclusive environment that values creativity and collaboration. If you're passionate about cybersecurity and want to make a meaningful impact, this opportunity is perfect for you. Embrace the chance to thrive in a supportive workplace where your contributions truly matter.

Qualifications

• 5+ years in cybersecurity governance, risk assessment, or compliance.
• Experience in a corporate setting, preferably within a CRO.

Responsibilities

• Conduct risk assessments to identify and evaluate potential threats.
• Collaborate with stakeholders to implement security policies.

Skills

Analytical Skills

Problem-Solving Skills

Cybersecurity Principles

Governance Frameworks

Risk Management Practices

Communication Skills

Education

Bachelor's Degree in IT

Equivalent Degree in Cybersecurity

Tools

ISO Standards

NIST Standards

GDPR Compliance

HIPAA Compliance

Job description

Who we are

We’re a global, midsize CRO that pushes boundaries, innovates and invents because the path to a cure for the world’s most persistent diseases is not paved by those who play it safe. It is built by those who take pioneering, creative approaches and implement them with quality and excellence.

We are Worldwide Clinical Trials, and we are a global team of over 3,500+ experts, bright thinkers, dreamers and doers and, together, we are changing the way the world experiences CROs - in the best possible way.

Our mission is to work with passion and purpose every day to improve lives and we are looking for others who value this same pursuit.

Why Worldwide

We believe everyone plays an important role in making a world of difference for patients and their caregivers. From our hands-on, accessible leaders, to our cohesive and supportive teams, we are committed to enabling professionals from all backgrounds and experiences to succeed. We prioritize cultivating a diverse and inclusive environment that continues to promote collaboration and creativity. We are proud to be a workplace where people thrive by being themselves and are inspired to do their best work every day. Join us!

What the Information Technology Department does at Worldwide

The IT department is made up of seasoned professionals united in one common goal: to keep Worldwide’s technical infrastructure operating at the highest levels for our employees and our customers. We are a global team comprised of numerous professionals including cyber security, artificial intelligence, IT helpdesk, application support, and more.

What you will do

1. Conduct risk assessments to identify and evaluate potential threats, calculating impact and likelihood, and recommending risk mitigation strategies.
2. Handle Requests for Information, Audit Questionnaires, and third-party risk evaluations.
3. Collaborate with stakeholders across Clinical Operations, IT, Legal, and others to draft, refine, and implement security policies aligned with industry standards (e.g., ISO, NIST, CIS CSC) and regulatory requirements (e.g., GDPR, HIPAA).
4. Prepare and deliver reports on the organization’s risk profile, compliance status, and progress toward risk mitigation objectives.
5. Identify opportunities to improve GRC processes and implement practical enhancements to streamline workflows.

What you will bring to the role

1. Strong analytical and problem-solving skills with the ability to assess risks and develop actionable recommendations.
2. Knowledge of cybersecurity principles, governance frameworks, and risk management practices.
3. In-depth knowledge of healthcare/clinical research compliance frameworks and their intersection with cybersecurity governance.
4. Ability to communicate effectively with technical and non-technical stakeholders, including preparing clear and concise reports.
5. Experience in GRC within a clinical research organization (CRO) or similar regulated environment is highly desirable.
6. Certified in Risk and Information Systems Control (CRISC), Certified Information Systems Auditor (CISA) or similar certification is beneficial. Aspiration or movement towards obtaining the CISSP certification is a plus.

Your experience

1. Bachelor’s Degree or 4-year equivalent degree in IT, Cybersecurity, or a related field.
2. Minimum of 5 years of experience in cybersecurity governance, risk assessment, or compliance, preferably in a corporate setting.
3. Understanding of key industry standards, frameworks, and regulations pertinent to cybersecurity governance such as ISO 27001/27002 and CIS CSC.
4. Strong written and verbal communication skills, able to articulate complex issues in a clear and concise manner.
5. Experience with third-party risk management, identifying risk in identity and access management, and compliance monitoring.

We love knowing that someone is going to have a better life because of the work we do.

Worldwide is an equal opportunity employer that is committed to enabling professionals from all backgrounds and experiences to succeed and, to that end, we prioritize attracting diverse talent and cultivating an inclusive environment that encourages collaboration and creativity. We know that when our employees feel appreciated and included, they can be more creative, innovative, and successful. We’re on a mission to hire the very best and are committed to creating exceptional employee experiences where everyone is respected and has access to equal opportunity. We provide equal employment opportunities to all employees and applicants regardless of race, color, ethnicity, ancestry, religion, national origin, gender, sex, gender identity or expression, sexual orientation, age, citizenship, marital or parental status, disability, military status, or other class protected by applicable law.