IT Security Engineer II
- Compensation
- Not disclosed
- Location
- Lagunilla, Costa Rica
- Work setup
- Not specified
- Seniority
- Middle
- Employment
- Not specified
- Experience
- 3+ years
- Category
- Security
- Posted
Skills
Must have
- 3+ years' experience in risk analysis, information risk management, data privacy, information technology, or equivalent with exposure to cybersecurity and/or information security risk
- Bachelor's Degree in Risk Management, Information Assurance, Information Security, Cybersecurity, IT, Data Privacy or similar area or equivalent work experience
- Experience with risk analysis
- Ability to explain complex risk management topics to a broad audience
- General understanding of cybersecurity technologies and controls with the ability to bridge the gap between governance and technical concepts
- Excellent writing skills, with experience as a writer or technical editor is considered a plus
- Demonstrated ability to complete work with minimal direction and self-identify tasks
- Excellent written and verbal communication skills with experience presenting to senior leadership
- Strong interpersonal, organizational, and excellent documentation skills
- Excellent customer service skills
- Relevant certifications such as CRISC, CISSP or CISA are considered a plus
- Understanding of various risk management frameworks such as the NIST Risk Management Framework or Center for Internet Security Risk Assessment Methodology will be considered plus
Full description
Work Schedule
Standard (Mon-Fri)
Environmental Conditions
Office
Job Description
As part of the Thermo Fisher Scientific team, you'll discover meaningful work that makes a positive impact on a global scale. Join our colleagues in bringing our Mission to life every single day to enable our customers to make the world healthier, cleaner and safer. We provide our global teams with the resources needed to achieve individual career goals while helping to take science a step beyond by developing solutions for some of the world's toughest challenges, like protecting the environment, making sure our food is safe or helping find cures for cancer.
DESCRIPTION
Join our cybersecurity team and contribute to protecting our global enterprise. As an IT Security Engineer II, you'll help safeguard our mission of enabling customers to make the world healthier, cleaner, and safer. Working with advanced security technologies and a collaborative team, you'll monitor, detect, and respond to security threats while implementing robust protective measures across our network infrastructure.
You'll have the opportunity to work on diverse projects, from managing enterprise firewalls and VPN systems to conducting security assessments and incident response. This role combines hands-on technical work with strategic thinking, as you'll help develop and implement security policies, analyze risks, and provide solutions to complex cybersecurity challenges. You'll also collaborate with cross-functional teams to ensure the security of our products and services while maintaining compliance with industry standards.
This position will be part of a team that will be responsible for driving visibility and have understanding of information security risk management to contribute and influence strategic decision making across the enterprise. Candidates should have good research, writing, and presenting skills, desire to solve complex problems, and the drive to complete assignments on-time with minimal oversight.
Key Responsibilities:
- Providing key input and assistance in the development and implementation of a global cybersecurity risk management program
- Maintaining and executing the risk management policy throughout the entire risk lifecycle
- Executing various risk analysis processes within the team including intake and analysis of reported risks, risk measurement, risk response, and ensuring teams are properly managing plans to reduce risk
- Execute third party security assessments and analyze identified risks to help with strategic decisions around third party management
- Ensure consistency of security practice and standards across the organization
- Conduct Information Security assessments including and documenting controls, identifying potential gaps and or inconsistencies and making sound recommendations for improvement and/or mitigation