Description

Job Responsibilities

The Cyber Security Resiliency Technical analyst will be a member of the Office of the CISO organization and a member of Cyber Resiliency Team. The team is responsible for ensuring that Syneos Health can effectively respond and recover from disruptive events and cyber threat.

This role executes analysis of data, telemetry, and technical configurations to identify weaknesses in operational and process controls. The Analyst uses a data-driven approach to assess risks, uncover coverage gaps, and prioritize actions that strengthen resiliency. The individual will be a key driver to working across the organization and identifying weaknesses within the security program and using data to validate risks.

The ideal candidate is analytical, curious, and adept at using data to expose underlying risks and drive measurable, intentional improvements in the organization’s security posture. Program requirements are aligned to NIST, HITRUST, CIS, and CCM frameworks to guide maturity and consistency. The person suited for this role is an out of the box thinker, who can seek the use of data to identify underlying risks to the security posture of Syneos Health.

JOB RESPONSIBILITIES

• Support the cyber resiliency program:
  • Support execution of the Cyber Resiliency and Exposure Management program.
  • Develop reports and dashboards that track key resiliency metrics, exposure trends, and control performance.
  • Evaluate vulnerability, configuration, and operational telemetry to identify exposure or resiliency weaknesses.
  • Implement KPI and metric reporting.
  • Partner with security architects and engineers to create requirements.

• Partner with operational teams to:
  • Partners with architects, engineers, and operations teams to define resiliency metrics and validate risks.
  • Identify missing technology or scanning coverage areas (e.g., systems, middleware, databases) and recommend action.
  • Correlate vulnerability & threat data to help prioritize remediation of likely exploitations.
  • Understand policy configurations of security technologies.

• Educate and drive engagement of security engineering and operational teams to:
  • Be a transformation agent in promoting identified risk remediation.
  • Support security reviews to evaluate readiness against common attack vectors and recommend improvements.

QUALIFICATION REQUIREMENTS (please indicate if ‘preferred’)

• Cyber Security
  • 2–5 years of experience in cybersecurity operations, vulnerability management, or cyber risk analysis.
  • 1 year of experience performing data analytics with visualization tools, e.g., PowerBI
  • Strong familiarity with security frameworks, such as NIST CSF, HITRUST, AND CCM
  • Understanding of CVSS, EPSS, KEV, and other prioritization or threat correlation methods.
  • Strong analytical skills and ability to interpret and present complex data.
  • Effective communication and collaboration with technical and non-technical audiences.
  • Strong understanding of Exposure Management, Vulnerability Management, Assessment or Audit execution.
    • High-level understanding of AWS, Azure, OCI
    • Mitre attack framework.
    • Data Analytics.
    • Threat Modeling.

• Education
  • Bachelor’s degree in Cybersecurity, Information Systems, or related field preferred or 5 years of experience as a security engineer or 7 as an enterprise security architect.
  • Vendor IAM certifications for enterprise solutions
  • Cloud Certification for OCI, AWS or Azure (Azure preferred)

Competencies

• Analytical & Critical Thinking
• Data-Driven Risk Awareness
• Cyber Resilience Insight
• Collaboration & Communication
• Process & Continuous Improvement Discipline

Get to know Syneos Health

Over the past 5 years, we have worked with 94% of all Novel FDA Approved Drugs, 95% of EMA Authorized Products and over 200 Studies across 73,000 Sites and 675,000+ Trial patients.

No matter what your role is, you’ll take the initiative and challenge the status quo with us in a highly competitive and ever-changing environment. Learn more about Syneos Health.

http://www.syneoshealth.com

Additional Information

Tasks, duties, and responsibilities as listed in this job description are not exhaustive. The Company, at its sole discretion and with no prior notice, may assign other tasks, duties, and job responsibilities. Equivalent experience, skills, and/or education will also be considered so qualifications of incumbents may differ from those listed in the Job Description. The Company, at its sole discretion, will determine what constitutes as equivalent to the qualifications described above. Further, nothing contained herein should be construed to create an employment contract. Occasionally, required skills/experiences for jobs are expressed in brief terms. Any language contained herein is intended to fully comply with all obligations imposed by the legislation of each country in which it operates, including the implementation of the EU Equality Directive, in relation to the recruitment and employment of its employees. The Company is committed to compliance with the Americans with Disabilities Act, including the provision of reasonable accommodations, when appropriate, to assist employees or applicants to perform the essential functions of the job.

Summary