IT Security Analyst II

Job Description:

IT Security Analyst II

The IT Security Analyst II serves as the organization’s primary internal coordinator for cybersecurity procedures, monitoring, reporting, and continuous improvement.

This position oversees the managed service provider’s (MSP) security services, reviews its work and recommendations, coordinates internal responses, and ensures that identified risks and required actions are addressed.

The analyst will manage recurring security reviews, reporting, incident and vulnerability follow-up, documentation, and customer security audits. In support of the CIO and IT Manager, the analyst will also present security findings, risks, and recommended strategies to senior management, customers, and internal staff.

Make an Impact at Veristat!

Join a global team with more than 30 years of expertise accelerating life-changing therapies to patients worldwide.

• 105+ approved therapies for marketing applications prepared by Veristat
• 480+ oncology projects in the past 5 years
• 350+ rare disease projects delivered in the past 5 years
• Flexible, inclusive culture — 70% remote workforce, 66% women-led teams
• Learn more about our core values here!

What we offer:

The estimated hiring range for this role is $89K – 98K plus applicable bonus. This hiring range is specific to the USA and will vary for other regions based upon local market data.  Final salary is ultimately decided upon taking into account a wide range of factors, including but not limited to: skills and experience, licensure and certifications, education, specific location and dynamic market data.

•  Benefits vary by location and may include:
  • Remote working
  • Flexible time off
  • Paid holidays
  • Medical insurance
  • Tuition reimbursement
  • Retirement plans 

What we look for:

• 3+ years of experience in cybersecurity, IT operations, security operations, systems administration, IT risk, compliance, or a related technical role.

• Practical understanding of common cybersecurity threats, technologies, controls, and operational practices.

• Experience working with an MSP, managed security provider, technology vendor, or outsourced IT organization.

• Ability to critically evaluate reports, investigations, recommendations, and technical work performed by external providers.

• Experience reviewing security alerts, dashboards, vulnerability findings, logs, or reports.

• Strong written documentation, organization, and follow-through.

• Experience preparing reports, presentations, audit responses, or security communications.

• Sound judgment regarding security investigation, prioritization, and escalation.

• Ability to work independently and communicate effectively in a remote environment.

• Availability during normal Eastern Time business hours, with reasonable flexibility for incidents, audits, or project needs.

• Experience in a life sciences, biotechnology, pharmaceutical, medical-device, healthcare, clinical research, or other regulated organization.

• Understanding of requirements such as GxP, HIPAA, FDA regulations, 21 CFR Part 11, validated systems, or data-integrity practices.

• Experience supporting audits, regulatory inspections, or formal control assessments.

• Project-coordination experience involving security technology, compliance, or process improvements.

• Relevant certifications such as Security+, CySA+, SSCP, CISA, GIAC, or Microsoft security credentials.

Automated Decision Making: All applicants are reviewed by a member of the Veristat Talent Acquisition team; Veristat does not utilize an automated decision-making process.

#LI-SI1