IT Security Risk and Compliance Analyst II
United Therapeutics Corporation
13 hours ago
Remote friendly (Silver Spring, MD)
United States
IT
Responsibilities:
- Support Information Security, Risk, and Compliance programs (e.g., Vulnerability Management) aligned to risk appetite and compliance requirements.
- Serve as a consultant to ensure adherence to security, risk, and compliance principles.
- Develop and analyze reports/alerts to identify gaps and improve security, risk, and compliance posture.
- Evaluate technology solutions and provide recommendations to meet business and security needs.
- Participate in risk assessments and risk analysis; partner with stakeholders to create acceptable risk treatment plans.
- Participate in cross-functional security/risk/compliance initiatives (including third parties) and drive them to completion.
- Partner with other IT teams to achieve organizational goals.
- Participate in incident response, perform root cause analysis, and complete lessons-learned reviews.
- Monitor information privacy/security technology advancements; update documentation.
- Review/investigate security cases, alerts, and events.
- Monitor and provide oversight of IT security tools and platforms.
Minimum Requirements:
- H.S. Diploma/GED (6+ years) OR Associate’s (4+ years) OR Bachelor’s (2+ years).
- 2+ years of information security experience.
- Strong organization, prioritization, and time management.
- Integrity and confidentiality.
- Problem-solving and analytical skills.
- Effective written and verbal communication with stakeholders.
Preferred Qualifications:
- Pharma/biotech industry experience.
- Risk management; change control.
- SANS GSEC; root cause analysis skills.
Job Location:
- Hybrid in Silver Spring, MD; onsite at least 2 days/week.
Compensation/Benefits (if part of posting):
- $91,000–$125,000/year; eligible for short- and long-term incentive programs.
- Comprehensive benefits including medical/dental/vision/prescription, wellness, 401k/ESPP, paid time off and paid parental leave, disability, and more.
- Support Information Security, Risk, and Compliance programs (e.g., Vulnerability Management) aligned to risk appetite and compliance requirements.
- Serve as a consultant to ensure adherence to security, risk, and compliance principles.
- Develop and analyze reports/alerts to identify gaps and improve security, risk, and compliance posture.
- Evaluate technology solutions and provide recommendations to meet business and security needs.
- Participate in risk assessments and risk analysis; partner with stakeholders to create acceptable risk treatment plans.
- Participate in cross-functional security/risk/compliance initiatives (including third parties) and drive them to completion.
- Partner with other IT teams to achieve organizational goals.
- Participate in incident response, perform root cause analysis, and complete lessons-learned reviews.
- Monitor information privacy/security technology advancements; update documentation.
- Review/investigate security cases, alerts, and events.
- Monitor and provide oversight of IT security tools and platforms.
Minimum Requirements:
- H.S. Diploma/GED (6+ years) OR Associate’s (4+ years) OR Bachelor’s (2+ years).
- 2+ years of information security experience.
- Strong organization, prioritization, and time management.
- Integrity and confidentiality.
- Problem-solving and analytical skills.
- Effective written and verbal communication with stakeholders.
Preferred Qualifications:
- Pharma/biotech industry experience.
- Risk management; change control.
- SANS GSEC; root cause analysis skills.
Job Location:
- Hybrid in Silver Spring, MD; onsite at least 2 days/week.
Compensation/Benefits (if part of posting):
- $91,000–$125,000/year; eligible for short- and long-term incentive programs.
- Comprehensive benefits including medical/dental/vision/prescription, wellness, 401k/ESPP, paid time off and paid parental leave, disability, and more.