Senior Info Security Risk Analyst (Argentina, home-based)

Description

Syneos Health® is a leading fully integrated biopharmaceutical solutions organization built to accelerate customer success. We translate unique clinical, medical affairs and commercial insights into outcomes to address modern market realities.  

Our Clinical Development model brings the customer and the patient to the center of everything that we do. We are continuously looking for ways to simplify and streamline our work to not only make Syneos Health easier to work with, but to make us easier to work for.

Whether you join us in a Functional Service Provider partnership or a Full-Service environment, you’ll collaborate with passionate problem solvers, innovating as a team to help our customers achieve their goals. We are agile and driven to accelerate the delivery of therapies, because we are passionate to change lives.

Discover what our 29,000 employees, across 110 countries already know: 
WORK HERE MATTERS EVERYWHERE

Why Syneos Health

• We are passionate about developing our people, through career development and progression; supportive and engaged line management; technical and therapeutic area training; peer recognition and total rewards program.
• We are committed to our Total Self culture – where you can authentically be yourself. Our Total Self culture is what unites us globally, and we are dedicated to taking care of our people. 
• We are continuously building the company we all want to work for and our customers want to work with. Why? Because when we bring together diversity of thoughts, backgrounds, cultures, and perspectives – we’re able to create a place where everyone feels like they belong.

Job responsibilities

Core to Syneos Health, we drive governance of policies and standards, identify, manage cybersecurity-related risks, and provide assurance to stakeholders. The successful candidate will participate in the information security risk management program to reduce the risks to the level that is acceptable to the organization. The candidate will possess deep knowledge of security control frameworks, stay abreast of the evolving threat landscape, and have past experience working in a cybersecurity risk management, and/or audit environment.  They will cooperate with various internal and external stakeholders to ensure that Syneos Health and its third parties meet or exceed internal and external cybersecurity and legal requirements. This role requires a good understanding of information security principles, risk assessment methodologies, and industry best practices.

In addition to the job responsibilities below, this role understands and adapts to an ever-changing cybersecurity risk landscape and helps to evolve Syneos Health’s cybersecurity program to meet and address these challenges.

Job Responsibilities:

·       Serves as a senior member of the working team for Risk Management within the Governance, Risk, and Assurance (GRA) function.

·       Conducts information security risk assessments of IT solutions (third-party and internally developed) and internal processes.

·       Assesses information security risks of changes to existing IT solutions.

·       Identifies, analyzes, assesses, monitors, and tracks risks in the information security risk register.

·       Monitors and tracks risk mitigations to ensure cyber security policies and standards are established, implemented and followed.

·       Collaborates with cross-functional teams to ensure risk management practices and IT solutions align with business objectives and compliance requirements.

·       Utilizes tools from various processes (e.g. vulnerability management, anti-virus, Secure SDLC, etc.) to verify the presence of risks.

·       Periodically reports to internal stakeholders on overall IT solutions risk profile.

·       Conducts Information Security Risk Assessment program improvements based on legal, stakeholder, and best practice requirements.

·       Collaborates with internal stakeholders (Security Operations, Technology Solutions, Governance, Risk and Assurance, Privacy, Regulatory & Compliance, etc.) and third parties as part of the risk management program.

·       Participates in ad-hoc, non-systematic risk assessment requests.

·       Stay updated with the latest cybersecurity trends, emerging threats, and industry developments to provide proactive risk mitigation recommendations.

Qualifications

What we’re looking for

Bachelor’s degree in computer science, Information Security, or a related field. Relevant certifications such as CISA, CRISC, or ISO 27001 auditor are highly desirable.

·       Five years experience working as an Information Security Risk Analyst or in a similar role focused on information security risk management.

·       Experience in utilizing tools for risk profile data collection is desirable.

·       Experience in utilizing One Trust platform is desirable.

·       Good knowledge of cybersecurity principles, governance and regulatory compliance.

·       Deep understanding of risk assessment methodologies, vulnerability management, and security control frameworks (e.g., NIST, ISO 27001, COBIT)

·       Familiarity with security controls, technologies, and best practices to mitigate cyber risks.

·       Proficient in Microsoft Office (Excel, PowerPoint, Word)

·       Strong communication and interpersonal skills to collaborate effectively with cross-functional teams and stakeholders.

·       Excellent analytical and problem-solving skills

·       Ability to work independently as well as collaboratively in a team environment, prioritize tasks, and manage time effectively.

Get to know Syneos Health

Over the past 5 years, we have worked with 94% of all Novel FDA Approved Drugs, 95% of EMA Authorized Products and over 200 Studies across 73,000 Sites and 675,000+ Trial patients.

No matter what your role is, you’ll take the initiative and challenge the status quo with us in a highly competitive and ever-changing environment. Learn more about Syneos Health.

Additional Information:
Tasks, duties, and responsibilities as listed in this job description are not exhaustive.  The Company, at its sole discretion and with no prior notice, may assign other tasks, duties, and job responsibilities.  Equivalent experience, skills, and/or education will also be considered so qualifications of incumbents may differ from those listed in the Job Description.  The Company, at its sole discretion, will determine what constitutes as equivalent to the qualifications described above.   Further, nothing contained herein should be construed to create an employment contract.  Occasionally, required skills/experiences for jobs are expressed in brief terms.  Any language contained herein is intended to fully comply with all obligations imposed by the legislation of each country in which it operates, including the implementation of the EU Equality Directive, in relation to the recruitment and employment of its employees.  The Company is committed to compliance with the Americans with Disabilities Act, including the provision of reasonable accommodations, when appropriate, to assist employees or applicants to perform the essential functions of the job.