Information Security

IT Security Analyst (Analyst, IT)

Veristat

Boston · Massachusetts · United States

Job Description:

IT Security Analyst II

The IT Security Analyst II serves as the organization’s primary internal coordinator for cybersecurity procedures, monitoring, reporting, and continuous improvement.

This position oversees the managed service provider’s (MSP) security services, reviews its work and recommendations, coordinates internal responses, and ensures that identified risks and required actions are addressed.

The analyst will manage recurring security reviews, reporting, incident and vulnerability follow-up, documentation, and customer security audits. In support of the CIO and IT Manager, the analyst will also present security findings, risks, and recommended strategies to senior management, customers, and internal staff.

Make an Impact at Veristat!

Join a global team with more than 30 years of expertise accelerating life-changing therapies to patients worldwide.

105+ approved therapies for marketing applications prepared by Veristat

480+ oncology projects in the past 5 years

350+ rare disease projects delivered in the past 5 years

Flexible, inclusive culture — 70% remote workforce, 66% women-led teams

Learn more about our core values

here !

What we offer:

The estimated hiring range for this role is $89K – 98K plus applicable bonus. This hiring range is specific to the USA and will vary for other regions based upon local market data. Final salary is ultimately decided upon taking into account a wide range of factors, including but not limited to: skills and experience, licensure and certifications, education, specific location and dynamic market data.

Benefits vary by location and may include:

Remote working

Flexible time off

Paid holidays

Medical insurance

Tuition reimbursement

Retirement plans

What we look for:

3+ years of experience in cybersecurity, IT operations, security operations, systems administration, IT risk, compliance, or a related technical role.

Practical understanding of common cybersecurity threats, technologies, controls, and operational practices.

Experience working with an MSP, managed security provider, technology vendor, or outsourced IT organization.

Ability to critically evaluate reports, investigations, recommendations, and technical work performed by external providers.

Experience reviewing security alerts, dashboards, vulnerability findings, logs, or reports.

Strong written documentation, organization, and follow-through.

Experience preparing reports, presentations, audit responses, or security communications.

Sound judgment regarding security investigation, prioritization, and escalation.

Ability to work independently and communicate effectively in a remote environment.

Availability during normal Eastern Time business hours, with reasonable flexibility for incidents, audits, or project needs.

Experience in a life sciences, biotechnology, pharmaceutical, medical-device, healthcare, clinical research, or other regulated organization.

Understanding of requirements such as GxP, HIPAA, FDA regulations, 21 CFR Part 11, validated systems, or data-integrity practices.

Experience supporting audits, regulatory inspections, or formal control assessments.

Project-coordination experience involving security technology, compliance, or process improvements.

Relevant certifications such as Security+, CySA+, SSCP, CISA, GIAC, or Microsoft security credentials.

Automated Decision Making: All applicants are reviewed by a member of the Veristat Talent Acquisition team; Veristat does not utilize an automated decision-making process.

#LI-SI1

Veristat is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.

Reference: WJ-4487_22527691

Apply now

Continue on the employer's official application - the same link they use for every candidate.

More jobs

Find more on GigBlows

This role is listed on GigBlows for discovery and search. Hiring decisions and applications are handled by the employer or their chosen application system.