Senior IT Security and Risk Analyst

Company Description
Eurofins Scientific is an international life sciences company which provides a unique range of analytical testing services to clients across multiple industries. The Group believes it is the world leader in food, environment and pharmaceutical products testing and in agroscience CRO services. It is also one of the global independent market leaders in certain testing and laboratory services for genomics, discovery pharmacology, forensics, advanced material sciences and for supporting clinical studies. In addition, Eurofins is one of the key emerging players in specialty clinical diagnostic testing in Europe and the USA.

Group's key figures are approx. 4.56 billion Euros turnover, over 800 laboratories across 50 countries and more than 50,000 staff.

**Job Description**:
The Senior Security and Risk Analyst will be responsible for analysing security risks and ensuring an adequate understanding of the confidentiality / integrity / availability requirements for the region and for each laboratory in scope. The profile will ensure that risks are mitigated or formally accepted by management, will support the implementation of remediations and follow-up regularly with laboratories.

This role is part of the Regional IT Security Office for multiple European businesses of the Eurofins Group (Food & feed testing, Environment testing, Sensory).
**At regional level, the scope includes**:

- Ensuring that changes are reviewed and approved prior to release.
- Reviewing/assessing third parties that the region contracts with.
- Prepare answers to client audits/questionnaires
**At laboratory level, the scope includes**:

Creating and managing a security plan for each laboratory independently, when needed.
- Prioritizing audits and security scans and supporting laboratories during third party audits.
- Ensuring that adequate inventories of assets, third parties and local processes is maintained, with a special focus on internet facing assets
- Assessing security posture during M&As and onboarding newly acquired laboratories.

**Qualifications**:

- At ease with managing multiple priorities, ambiguity and rapidly moving business environment; quick learner and adaptable.
- Strong Emotional Intelligence with demonstrated leadership in a large organization involving multiple stakeholders.
- Demonstrated ability to work with diverse people. Excellent written and verbal communication skills, interpersonal and collaborative skills, and the ability to communicate information security and risk-related concepts to technical and non-technical audiences.
- Strong leadership abilities, with the capability to guide IT operations personnel, and work with mínimal supervision.
- Experience in establishing cyber security and risk metrics for reporting.
- Good understanding of IT technology to ensure the achievement of business outcomes where the business process is dependent on technology. Prior experience with cloud deployments is appreciated
- Experience working with legal, audit, operations and compliance staff.
- Experience developing and maintaining policies, procedures, standards and guidelines.
- Certified Information Security Manager (CISM) Certification, Certified Information Systems Security Professional (CISSP) Certification, and/or Project Management certifications **_preferred_**.
- Experience with common information security management frameworks, such as International Standards Organization (ISO) 2700x, the IT Infrastructure Library (ITIL) the European Union Privacy Directives **_preferred_**.
- Fluent English **_mandatory_**, knowledge of another language (French, Spanish, German, Polish) is **_highly appreciated_**
- Master’s degree from an accredited institution, with degree preferred in Computer Science or Information technology systems security or related field and 5+ years of relevant experience **_preferred_** although atypical profiles are welcome to apply.

Additional Information