Security Analyst

Quick Facts

Security Analyst role focused on hands-on security operations and compliance in a regulated, multi-country pharmaceutical group.

Description

You will be the hands-on security person for day-to-day security operations—monitoring alerts, investigating events, and coordinating incident response with local IT teams. The role supports NIS2 compliance and strengthens security across a modern Microsoft E5 security stack (Defender XDR, Sentinel, Intune, Purview). You will also improve Microsoft platform security (Entra ID, device compliance, email and data protection) and grow into AI security as AI tooling is adopted.

Responsibilities

• Monitor security alerts in Microsoft Defender and Sentinel; investigate, escalate and coordinate incident response with local IT teams.
• Run vulnerability management and follow up remediation with local and group IT.
• Maintain and improve security configuration of the Microsoft environment (Entra ID Conditional Access, MFA; Intune device compliance; email protection; data protection) and drive Secure Score improvements over time.
• Support NIS2 implementation across entities: documentation, evidence collection, and incident reporting.
• Support audits, risk assessments, and supplier security reviews.
• Coordinate security awareness training and phishing simulations.
• Be the go-to person for local IT and business teams on security questions.
• Work closely with the group security team on standards, tooling, and reporting.
• Develop AI security capabilities: AI license/access management, AI data-handling rules, and securing internal AI agents before go-live.

Requirements

• 3+ years hands-on experience in IT infrastructure, networking or system administration (network/firewall administration, sysadmin, M365 or Azure administration).
• Working familiarity with Microsoft 365 / Azure environments.
• Genuine interest in security; some exposure to hardening, access management, and incident handling is a plus.
• Structured way of working, curiosity, and ability to learn fast.
• Good written and spoken English and Romanian.

Benefits

• Real transition path into cybersecurity with certification budget, structured learning time, and direct mentoring from a CISM-certified manager.
• Group-level exposure from day one (17 countries) with a live NIS2 program and a modern Microsoft E5 security stack.
• Possibility to work fully remotely.
• Opportunity to engage in AI adoption and AI security in a regulated industry.