Senior Security Analyst - UK - Home-based at Worldwide Clinical Trials
United Kingdom, , United Kingdom -
Full Time


Start Date

Immediate

Expiry Date

20 May, 25

Salary

0.0

Posted On

21 Feb, 25

Experience

5 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

No

Skills

Communication Skills, Ethnicity, Risk Assessment, Regulations, Creativity, Www, Risk, Linkedin, Access, Collaboration, Citizenship, It

Industry

Information Technology/IT

Description

WHO WE ARE

We’re a global, midsize CRO that pushes boundaries, innovates and invents because the path to a cure for the world’s most persistent diseases is not paved by those who play it safe. It is built by those who take pioneering, creative approaches and implement them with quality and excellence.
We are Worldwide Clinical Trials, and we are a global team of over 3,500+ experts, bright thinkers, dreamers and doers and, together, we are changing the way the world experiences CROs – in the best possible way.
Our mission is to work with passion and purpose every day to improve lives and we are looking for others who value this same pursuit.

YOUR EXPERIENCE

  • Bachelor’s Degree or 4-year equivalent degree in IT, Cybersecurity, or a related field
  • Minimum of 5 years of experience in cybersecurity governance, risk assessment, or compliance, preferably in a corporate setting.
  • Understanding of key industry standards, frameworks, and regulations pertinent to cybersecurity governance such as ISO 27001/27002 and CIS CSC.
  • Strong written and verbal communication skills, able to articulate complex issues in a clear and concise manner.
  • Experience with third-party risk management, identifying risk in identity and access management, and compliance monitoring.
    We love knowing that someone is going to have a better life because of the work we do.
    To view our other roles, check out our careers page at Discover a world of difference at Worldwide ! For more information on Worldwide, visit www.Worldwide.com or connect with us on LinkedIn .
    Worldwide is an equal opportunity employer that is committed to enabling professionals from all backgrounds and experiences to succeed and, to that end, we prioritize attracting diverse talent and cultivating an inclusive environment that encourages collaboration and creativity. We know that when our employees feel appreciated and included, they can be more creative, innovative, and successful. We’re on a mission to hire the very best and are committed to creating exceptional employee experiences where everyone is respected and has access to equal opportunity. We provide equal employment opportunities to all employees and applicants regardless of race, color, ethnicity, ancestry, religion, national origin, gender, sex, gender identity or expression, sexual orientation, age, citizenship, marital or parental status, disability, military status, or other class protected by applicable law
Responsibilities

WHAT YOU WILL DO

  • Conduct risk assessments to identify and evaluate potential threats, calculating impact and likelihood, and recommending risk mitigation strategies.
  • Handle Requests for Information, Audit Questionnaires, and third-party risk evaluations.
  • Collaborate with stakeholders across Clinical Operations, IT, Legal, and others to draft, refine, and implement security policies aligned with industry standards (e.g., ISO, NIST, CIS CSC) and regulatory requirements (e.g., GDPR, HIPAA).
  • Prepare and deliver reports on the organization’s risk profile, compliance status, and progress toward risk mitigation objectives.
  • Identify opportunities to improve GRC processes and implement practical enhancements to streamline workflows.

WHAT YOU WILL BRING TO THE ROLE

  • Strong analytical and problem-solving skills with the ability to assess risks and develop actionable recommendations.
  • Knowledge of cybersecurity principles, governance frameworks, and risk management practices.
  • In-depth knowledge of healthcare/clinical research compliance frameworks and their intersection with cybersecurity governance.
  • Ability to communicate effectively with technical and non-technical stakeholders, including preparing clear and concise reports.
  • Experience in GRC within a clinical research organization (CRO) or similar regulated environment is highly desirable.
  • Certified in Risk and Information Systems Control (CRISC), Certified Information Systems Auditor (CISA) or similar certification is beneficial. Aspiration or movement towards obtaining the CISSP certification is a plus.
Loading...