Security Analyst

You will be the hands-on security person for a sales & marketing pharmaceutical group active in 17 CEE countries. Day-to-day you will monitor and respond to security events, support our NIS2 compliance programme, and help local IT teams keep things secure – working on a modern, fully-licensed security stack with group-level standards and tooling behind you.

You will report to the CIO.

Zodpovednosti

Security operations

• Monitor security alerts in security monitoring tools; investigate, escalate and coordinate incident response with local IT teams.
• Run vulnerability management and follow up remediation with local and group IT.

Platform security

• Help maintain and improve the security configuration of our environment – identity and access management, device compliance, email protection, data protection – and drive our security score up over time. You will not own all of this alone from day one: you grow into it with group support.

NIS2 & compliance

• Support the NIS2 implementation across our entities: documentation, evidence collection, incident reporting.
• Support audits, risk assessments and supplier security reviews.
• Coordinate security awareness training and phishing simulations.

Partnering

• Be the go-to person for local IT and business teams on security questions.
• Work closely with the group security team on standards, tooling and reporting.

Where you can grow – AI security

As the group adopts AI tooling, you can grow into the security side of it: AI license and access management, data-handling rules for AI use, and securing internal AI agents before go-live. Interest matters more than experience here.

What we are looking for

• 3+ years hands-on experience in IT infrastructure, networking or system administration – network/firewall administration, sysadmin, cloud administration or administration of productivity environments. This is the foundation we want.
• Working familiarity with cloud and productivity environments.
• Genuine interest in security. Some exposure – hardening, access management, incident handling – is a plus; formal security experience is not required.
• A structured way of working, curiosity, and the ability to learn fast.
• Good written and spoken English.

Nice to have

• Any security certification or coursework – or the willingness to obtain one with our support.