IT Security Risk and Compliance Analyst II

Responsibilities Support Information Security, Risk, and Compliance programs (e.g., Vulnerability Management) aligned to risk appetite and compliance requirements. Serve as a consultant to ensure adherence to security, risk, and compliance principles. Develop and analyze reports/alerts to identify gaps and improve security, risk, and compliance posture. Evaluate technology solutions and provide recommendations to meet business and security needs. Participate in risk assessments and risk analysis; partner with stakeholders to create acceptable risk treatment plans. Participate in cross-functional security/risk/compliance initiatives (including third parties) and drive them to completion. Partner with other IT teams to achieve organizational goals. Participate in incident response, perform root cause analysis, and complete lessons‑learned reviews. Monitor information privacy/security technology advancements; update documentation. Review/investigate security cases, alerts, and events. Monitor and provide oversight of IT security tools and platforms. Minimum Requirements H.S. Diploma/GED (6+ years) OR Associate’s (4+ years) OR Bachelor’s (2+ years). 2+ years of information security experience. Strong organization, prioritization, and time management. Integrity and confidentiality. Problem‑solving and analytical skills. Effective written and verbal communication with stakeholders. Preferred Qualifications Pharma/biotech industry experience. Risk management; change control. SANS GSEC; root cause analysis skills. Job Location Hybrid in Silver Spring, MD; onsite at least 2 days/week. Compensation and Benefits $91,000–$125,000/year; eligible for short- and long‑term incentive programs. Comprehensive benefits including medical/dental/vision/prescription, wellness, 401k/ESPP, paid time off and paid parental leave, disability, and more. #J-18808-Ljbffr