Senior IT Security Specialist

Technologies we use

Your responsibilities

• lead and continuously improve information security governance, risk management, and compliance practices across the organization,
• conduct security risk assessments, business impact analyses, vulnerability assessments, and information security reviews,
• oversee security operations, security controls, cloud security practices, and incident management activities,
• investigate security incidents, breaches, and vulnerabilities and drive appropriate remediation and control improvements,
• develop, maintain, and continuously improve information security policies, standards, procedures, and controls,
• provide guidance on information and data compliance requirements and ensure appropriate compliance controls are implemented,
• plan and manage risk management activities, reporting, and mitigation measures,
• coordinate threat intelligence, information assurance, and accreditation activities, including third-party and supply-chain risks,
• contribute to the development of secure architectures and security solutions for new technologies and business requirements,
• prepare and present security, risk, compliance, and incident-related reports to relevant stakeholders,
• collaborate with technical and business stakeholders to identify, assess, prioritize, and mitigate information security risks,
• support the development of the security team and contribute to setting objectives, providing feedback, and professional development,
• stay up to date with emerging cybersecurity threats, technologies, regulatory requirements, and industry best practices.

Our requirements

• master's degree in Information Technology, Computer Science, Business Administration with a focus on IT, or a related field,
• minimum 9 years of professional experience in IT,
• minimum 3 years of experience in Information Security, Cybersecurity, or a comparable role,
• strong professional experience in information security governance, risk management, security operations, and compliance,
• strong knowledge and practical experience with information security standards and best practices, including ISO/IEC 27001,
• experience with risk assessment and risk management methodologies,
• experience with cloud platforms such as AWS, Microsoft Azure, or Google Cloud Platform,
• knowledge or experience with GDPR, GCP, ICH, or other applicable regulatory requirements,
• knowledge or experience with ITIL Foundation principles and practices,
• experience with security incident and breach management, vulnerability management, and security controls,
• understanding of information assurance, security architectures, and accreditation processes,
• knowledge or experience in threat intelligence and security monitoring,
• experience in leading, supervising, or developing a team,
• fluent English, both written and spoken,
• strong analytical, problem-solving, decision-making, and communication skills,
• ability to work independently, manage multiple priorities, and provide authoritative guidance,
• relevant professional certifications in information security, risk management, cloud security, or related areas are considered an advantage.

What we offer

• opportunity to work in a global, innovative, and growing organization dedicated to advancing healthcare and life sciences,
• the opportunity to shape and further develop information security, risk management, and compliance practices in an international organization,
• exposure to modern cloud technologies and enterprise cybersecurity programs,
• collaborative and international working environment,
• professional development, training, and certification opportunities,
• flexible working arrangements,
• competitive benefits package,
• stable employment in the company awarded Top Employer 2026.