IT Security Analyst - Biotech/Pharma (No C2C)

Job Title: IT Security AnalystLocation: South San Francisco, CADuration: 1 year contractJob DescriptionProfessional with experience in IT audit, risk and IT compliance management as well as data privacy. Individuals will deal with diverse and oftentimes complex issues, where analysis requires in-depth evaluation of multiple factors. Exercises judgment in evaluating risks and may determine criteria for obtaining solutions together with security experts. Networks with senior internal and external personnel in the area of expertise to provide contextual advice.Will work on the Information Security Program to ensure compliance for IT Security/Privacy and Computer System Validation. The individual will be part of corporate initiatives to ensure compliance with local and global regulations. Additional responsibilities include execution of third party risk assessments and vendor audits to evaluate cyber resiliency of service providers.DutiesCollaborate with multiple stakeholders from functions across gRED performing System Risk Assessments (SRA) on critical assets. Advise project teams, technical leads and engineers how to implement and accept SRA compulsory and mitigating controls using a risk based approachInitiate, manage and drive 3rd party Vendor Risk Assessments (VSA) to identify, assess and monitor security and associated compliance risks as needed for gRED vendors and/or Outsourced Delivery CentersCollaborates in the development of procedures and comprehensive tracking of the risk assessment process (SRAs, VSAs etc.)Work with cross-functional teams to ensure applicable regulations, guidelines and internal procedures related to validation of computer systems and associated infrastructure are followed and applied during all stages of the Software Development Life Cycle (SDLC), project phase activities and audit and documentation managementAnalyze the validation impact of changes through risk assessments and help in formulating the validation strategy for changes to existing or new computer systems and infrastructureIdentify and coordinate tasks required to complete qualification and validation activities, including reviews with Quality, obtaining signature approvals, executing qualification protocol or validation project plan, and managing change control (change requests)Keep management apprised of any developments through clear and timely communicationsProvide inputs on project plans, review upstream deliverables, and fully execute the testing phase thru production supportDeveloping strong working relationships and partnering effectively with IT delivery teams, global Business Quality, Corporate Audit, and the IT security/privacy organizationsDemonstrated ability to quickly learn the business in new/unfamiliar areas and rapidly understand business requirementsMaintaining industry knowledge and skills in the areas of compliance, audit, and risk management and applying them to improve internal processes and practicesSkills3 - 5+ years of experience in a GxP Validated environment. Risk Assessment experience preferredFormal training and proficiency in software development methodologies and computer systems validation in regulated industries (biotech/pharma)Strong oral and written communication skillsProficient in validation process methodologies, risk management, etcAgile and waterfall SDLC methodology experience preferredAbility to assemble, analyze and evaluate data and to be able to make appropriate and well-reasoned recommendations and decisions to the Business stakeholders and team membersMust be able to manage multiple tasks, set priorities, work independentlyMust be able to adjust priorities for unexpected assignments as neededCustomer focus and being a team player are a mustStrong desire to learn and adapt to new technologies and working relationshipsEffective experience in supporting infrastructure qualification/validation and working with global teams is a plusExcellent customer facing communication skillsStrong process documentation skills with a familiarity in current cloud/web-based technologies and infrastructure (e.g. Google collaboration suite, Document management platforms, etc.)EducationBachelors degree in Computer Science or a related discipline or equivalent experience preferred.