Information Security Associate Analyst

At Zimmer Biomet, we believe in pushing the boundaries of innovation and driving our mission forward. As a global medical technology leader for nearly 100 years, a patient's mobility is enhanced by a Zimmer Biomet product or technology every 8 seconds.

As a Zimmer Biomet team member, you will share in our commitment to providing mobility and renewed life to people around the world. To support our talented team, we focus on development opportunities, robust employee resource groups (ERGs), a flexible working environment, location specific competitive total rewards, wellness incentives and a culture of recognition and performance awards. We are committed to creating an environment where every team member feels inspired, invested, cared for, valued, and have a strong sense of belonging.

What You Can Expect

Architects, implements, configures, integrates, and operates a range of security technologies such as antimalware, auditing and logging, firewall, Identity Governance and Administration (IGA), Data Loss Prevention (DLP), network security, and other systems. Works with traditional on-premise and cloud-based solutions, to secure Zimmer Biomet's Information Technology (IT) and Operational Technology (OT) environments which are both on-premise and cloud-based.

How You'll Create Impact

• Design & Operations: Architect, implement, configure, integrate, and operate security systems and controls across IT/OT, on-prem, and cloud.

• Microsoft Purview: Deploy and administer Purview capabilities (sensitivity labels/classification, DLP policies, eDiscovery/Legal Hold, data lifecycle/retention, insider risk) and drive data protection outcomes with legal/compliance partners.

• Identity & Access: Support IGA processes, privileged access management, conditional access, MFA, and role-based access controls across hybrid identity platforms.

• Network Security: Operate and improve network security controls (firewalls, IDS/IPS, VPN, DMZ segmentation), evaluate change requests against standards, and participate in incident troubleshooting.

• Individual as well as group projects delivery. Strong collaboration with Governance, Risk, and Compliance (GRC) team, the Architecture and Advisory team, and the Incident Response (IR) team

• Security Engineer may be tasked with operating security controls as part of an ISO 27001-based Information Security Management System (ISMS), and reporting their efficiency to stakeholders.

What Makes You Stand Out

• Microsoft Purview (DLP, eDiscovery, Information Protection

• Operating Systems: Microsoft Windows Server; Linux/UNI

• Cloud Platforms: AWS, Google Cloud Platform, Microsoft Azure

• Productivity: Microsoft 365 / Microsoft Office

• Network Security: Enterprise firewalls, IDS/IPS, VPN (vendor-agnostic; Cisco/Fortinet/Palo Alto experience a plus)

• Scripting / coding (Python, PERL, BASH, PowerShell, etc.)

• Excellent communication skills (both oral and written)

• Must be a self-starter, able to work independently, and in a fast-paced environment

Your Background

• Preferred Qualification: Undergraduate degree (Computer Science or similar)

• Preferred Qualification: Cloud, networking, and / or Windows Server / Linux Certifications

• Preferred Qualification: Experience with ISO 22301

• Preferred Qualification: Vendor and technical certifications in BCM or BCP/DR

• Minimum Qualification: Bachelor's Degree and 0 years of relevant experience, or Associate's Degree and 2 years of relevant experience, or High School Diploma or Equivalent and 4 years of relevant experience

Travel Expectations

• 15%

EOE