Analyst II, Information Security (Operational Technology)

Scorpion Therapeutics; Madison (WI); On-site; USD 90,000 - 120,000; Full time

Job summary

Scorpion Therapeutics is seeking an Information Security Analyst II to safeguard OT and IT environments within a biopharma manufacturing setting. You will focus on industrial control systems, lab systems, and enterprise security across production facilities.

Responsibilities include supporting ICS, MES, DCS, SCADA and PLC cybersecurity, asset management, vulnerability assessments, risk mitigation, and implementing security controls in production.

Qualifications

• 3+ years supporting OT/ICS environments
• Familiarity with Purdue Model, ISA/IEC 62443, and NIST frameworks
• Experience with Windows, Active Directory, and enterprise networking
• Knowledge of security controls, vulnerability management and incident handling

Responsibilities

• Support cybersecurity for manufacturing and lab systems (ICS, MES, DCS, SCADA, PLC)
• Assist with asset management
• Conduct vulnerability assessments
• Mitigate risks and implement security controls in production
• Monitor threats and manage incident response
• Oversee enterprise security standards, endpoint security, system hardening, and compliance documentation

Skills

OT/ICS security experience

Vulnerability management

Incident handling / incident response

Security controls implementation

Education

Bachelor's degree in IT/security or related field

Tools

Dragos

Claroty

Nozomi

Job description

Role

Information Security Analyst II focused on safeguarding Operational Technology (OT) and Information Technology (IT) environments within a biopharma manufacturing setting, emphasizing industrial control systems and enterprise security.

Responsibilities

• support cybersecurity for manufacturing and lab systems (ICS, MES, DCS, SCADA, PLC)
• assist with asset management
• vulnerability assessments
• risk mitigation
• implement security controls in production
• monitor threats
• manage incident response
• Also oversee enterprise security standards, endpoint security, system hardening, and compliance documentation.

Requirements

• bachelor's in IT/security or related field
• 3+ years supporting OT/ICS environments
• familiarity with Purdue Model, ISA/IEC 62443, NIST frameworks
• experience with security controls, vulnerability management, incident handling
• knowledge of Windows, Active Directory, enterprise networking

Preferred

• OT security experience
• familiarity with industrial security tools (Dragos, Claroty, Nozomi, etc.)
• certifications
• and prior regulatory inspections

High-Value

manufacturing security, industrial control systems, compliance standards, threat monitoring, and remediation in a biopharma production context.

Work setup

location-based with no explicit travel details provided.