IT Security Analyst

Broad Overview We are looking for a detail-oriented IT security (cybersecurity) analyst to be responsible for desktop, mobile and network cybersecurity, troubleshooting incidents and implementing security policies and procedures. This individual will join an existing analyst and jointly be responsible for all aspects of the organisation’s IT security under the management and direction of the Group IT Director. This individual is expected to work at our Conshohocken, PA office on a hybrid schedule 3 days a week, with 2 work from home days. Responsibilities Global responsibility for managing IT cybersecurity. Keep current with trends and issues in the IT industry, including current technologies and prices. Advise, counsel and educate executives and management on their competitive, compliance or financial impact. Updating software with the latest security patches and ensuring the proper defences are present for each network resource. Performing vulnerability and penetration tests, identifying and defending against threats. Analysing security requirements and recommending improvements. Monitoring network traffic for suspicious behaviour. Developing network policies and authorization roles and defending against unauthorized access, modifications and destruction. Consulting with staff, managers and executives about best security practices and providing technical advice. Advising on the configuration of and supporting security tools, such as firewalls and anti-virus software. Training staff to understand and use security protocols. Ensuring technical implementations and timelines are aligned with ongoing business needs and based on best practices and/or SERB standards. Direct and indirect support of IT service desk and ticket management as an escalation point. Ensuring continuous delivery of IT services through oversight of service level agreements with end users and the monitoring of IT systems performance. Oversight of IT security, audit compliance and remediation. Responsible for the management of external cyber audits of the SERB IT Infrastructure and Security Program. Manage the 24x7 SOC/SIEM relationship with the responsible vendor. Remediate threats and monitor Defender, XDR and coordinate responses and communications. Escalate any security issues to the Group Head of IT and/or CFO. Assess, communicate and mitigate risks associated with IT investment and operation. Manage and perform regular cyber phishing campaigns to determine the resilience and training of the users. Ensure that IT policies are updated and work with HR, Legal and IT to ensure compliance. Ensure that all interactions and engagements are carried out with the highest ethical and professional standards and that all work is accomplished with quality and in accordance with SERB values. Carry out other reasonable tasks as required by the Group IT Director. Principal Relationships Accountable to: Group IT Director Internal: All SERB Employees External: Suppliers & Service Providers, including Contractors Education and Experience Bachelor's degree in computer science, cybersecurity, or a related field. Preferred: Certified Information Security Manager (CISM) or Certified Information Systems Security Professional (CISSP) or study courses towards certification with a record of continuous attendance. Minimum 5 years in a pharmaceutical, fintech or a similar industry. Experience working in a team‑oriented and collaborative environment. Excellent knowledge of current industry cybersecurity intelligence and approaches. Proven experience in the delivery of strategic projects and service delivery. Experience working in a highly regulated environment, laboratory or cleanroom is desirable. Strong skills in Azure AD Hybrid, GPO, Intune, Cisco FW, Antimalware/AV, Mimecast, O365 Security and Defender. Skills and Attributes Passion for cybersecurity and IT in general. Exceptional customer service and delivery focus. Exceptional interpersonal skills with a focus on relationship building and listening to customers. Strong verbal and written communication skills (telephone, e‑mail and messaging). Strong analytical and problem‑solving abilities. Aptitude to learn new technologies and approaches (training will be provided where required). Aptitude to work in an organised manner, under pressure and methodically. Competent and organised with the ability to manage and prioritise workload, multi‑task and handle a diverse mix of issues, responsibilities and challenges. Company Benefits Hybrid Working Vacation, Personal and Sick time 15 Paid Company Holidays Medical, Dental, Vision and other voluntary benefits Paid Parental Leave Tuition Assistance Discretionary Bonus Plan Competitive 401(k), $1 for $1 up to 6% of pay. The safe harbour match is vested immediately. Additionally, SERB offers a discretionary match of up to 4% of pay, vesting 20% a year for 5 years. Serb Pharmaceuticals is an equal opportunity employer. We offer competitive compensation and benefit packages, challenging opportunities and a culture of working together in a supportive way built on our strong foundation of values. #J-18808-Ljbffr