IT Security Risk and Compliance Analyst II

Responsibilities

• Support Information Security, Risk, and Compliance programs (e.g., Vulnerability Management) aligned to risk appetite and compliance requirements.
• Serve as a consultant to ensure adherence to security, risk, and compliance principles.
• Develop and analyze reports/alerts to identify gaps and improve security, risk, and compliance posture.
• Evaluate technology solutions and provide recommendations to meet business and security needs.
• Participate in risk assessments and risk analysis; partner with stakeholders to create acceptable risk treatment plans.
• Participate in cross-functional security/risk/compliance initiatives (including third parties) and drive them to completion.
• Partner with other IT teams to achieve organizational goals.
• Participate in incident response, perform root cause analysis, and complete lessons‑learned reviews.
• Monitor information privacy/security technology advancements; update documentation.
• Review/investigate security cases, alerts, and events.
• Monitor and provide oversight of IT security tools and platforms.

• H.S. Diploma/GED (6+ years) OR Associate’s (4+ years) OR Bachelor’s (2+ years).
• 2+ years of information security experience.
• Strong organization, prioritization, and time management.
• Integrity and confidentiality.
• Problem‑solving and analytical skills.
• Effective written and verbal communication with stakeholders.

• Pharma/biotech industry experience.
• Risk management; change control.
• SANS GSEC; root cause analysis skills.

Hybrid in Silver Spring, MD; onsite at least 2 days/week.

$91,000–$125,000/year; eligible for short- and long‑term incentive programs. Comprehensive benefits including medical/dental/vision/prescription, wellness, 401k/ESPP, paid time off and paid parental leave, disability, and more.