IT Security Risk and Compliance Analyst II

Information Security, Risk, and Compliance Consultant

We are the first publicly-traded biotech or pharmaceutical company to take the form of a public benefit corporation. Our public benefit purpose is to provide a brighter future for patients through the development of novel pharmaceutical therapies; and technologies that expand the availability of transplantable organs. United Therapeutics seeks to travel down the corridors of indifference to develop treatments for rare, deadly diseases. We were founded in 1996 by a family seeking a cure for their daughter's pulmonary arterial hypertension( PAH). Today, we have six FDA-approved therapies that treat PAH, pulmonary hypertension associated with interstitial lung disease (PH-ILD) and neuroblastoma, a rare pediatric cancer. Our near-term pipeline seeks to develop additional therapies for PAH and pulmonary fibrosis (PF). The cure for end-stage life-threatening diseases like PAH, PH-ILD, PF, and many others is an organ transplant, but only a small percentage of donated organs are available to address the vast need. For this reason, we are working to create manufactured organs to address the shortage of kidneys, hearts, lungs, and livers available for transplant.

In this role, you'll collaborate closely with cross-functional teams to design, implement, and optimize creative and cutting-edge IT security, risk, and compliance programs. You'll be pivotal in driving security initiatives forward—coordinating, tracking, and reporting on key efforts to ensure alignment with our risk strategy and compliance goals. If you're passionate about impacting cybersecurity while working on innovative solutions, this is your opportunity! Join a dynamic team dedicated to securing the future of United Therapeutics.

Support the organization's Information Security, Risk and Compliance programs (e.g., Vulnerability Management Program) to effectively address information technology risks in alignment with the organization's risk appetite and to meet compliance requirements.

Serve as a consultant to the organization to ensure understanding of and adherence to existing security, risk, and compliance principles and requirements.

Develop and analyze reports and alerts to identify gaps and propose changes to improve the organization's security, risk and compliance posture.

Evaluate existing and proposed technology solutions and provide recommendations and guidance to ensure business and security needs are adequately met.

Participate in risk assessments, perform risk analysis, and partner with stakeholders to create treatment plans that achieve an acceptable level of risk.

Participate in cross-functional teams, including third parties, in security, risk and compliance initiatives and driving them through to completion.

Partner with other IT teams to successfully achieve organizational goals and objectives.

Participate in incident response activities for all potential and declared IT security incidents and conduct root cause analysis and lessons learned reviews to ensure continuous process improvement.

Monitor advancements in information privacy and security technologies to ensure organizational adaptation and compliance.

Assist with creating and updating IT security and compliance documentation.

Review and investigate security related cases, alerts and events.

Monitor and provide oversight of IT security tools and platforms.

Minimum Requirements:

• H.S. Diploma or General Education Degree with at least 6 years of relevant work experience OR an Associate's degree with at least 4 years of relevant work experience OR a Bachelor's degree with at least 2 years of relevant work experience
• At least 2 years of experience in information security
• Superior organizational, prioritization, and time management skills
• Ability to maintain a high level of integrity and confidentiality
• Demonstrated problem-solving ability and analytical skills
• Ability to interact, listen, and communicate effectively, both written and verbal with all stakeholders

Preferred Qualifications:

• Experience working in the pharmaceutical/biotechnology industry
• Experience in risk management
• Experience with managing change control processes
• SANS GSEC
• Root cause analysis skills

This is a hybrid role in Silver Spring, MD, and reports onsite at least 2 days a week. The salary for this position ranges from $91,000 to $125,000 per year. In addition, this role is eligible for the Company's short-term and long-term incentive programs. Eligible employees may participate in the Company's comprehensive benefits suite of programs, including medical / dental / vision / prescription coverage, employee wellness resources, savings plans (401k and ESPP), paid time off & paid parental leave benefits, disability benefits, and more.