Pharma Medica Research (PMRI) is a Contract Research Organization that strives for innovation and original solutions in a highly regulated and competitive industry. We are actively looking for an exceptional and passionate individual who wants to work with an exceptional team of programmers and scientific experts in biopharmaceutical research to develop and maintain the Cybersecurity applications and solutions that protect the IT infrastructure of our organization. PMRI is always in forefront of the industry to develop and implement applications for the last 20 years. If you strive for innovation and original thinking you will be the perfect candidate to be part of an inclusive, adaptable, and forward-thinking organization.

The Cyber Security Specialist is responsible for all aspects of PMRI’s technical security posture. This includes evaluating, implementing and maintaining technology to protect the enterprise perimeter leveraging zero-trust policies. This includes, but is not limited to, firewall administration, SIEM monitoring and response, access auditing, DLP management and threat analysis for all internal/external endpoints and web assets.

The Cyber Security Specialist works closely with Software Development, IT, Compliance and Operations teams in various capacities such as ensuring adherence to policies and procedures related to systems security and compliance.

Responsibilities:

Day-to-day operational administration and support of security infrastructure, monitoring, upgrades, incidents and investigations across all environments: hosted, on-premises and cloud.
Assist with research, evaluation, testing and deployment of security technology using trusted frameworks lending to the NIST Cybersecurity Framework.
Conduct threat and risk analysis across the enterprise and provide recommendations to Maintain and refine IT security controls and policies within the ISMS (Information security Management system).
Collect and analyze sensor data pertaining to security and develop meaningful reports for evaluating PMRI’s security posture on a regular basis.
Contribute to organizational goals for obtaining and maintaining certification for various compliance standards such as ISO27001 and HIPAA.
Conduct security incident triage, communications, and post-incident reviews as well as raise awareness on emerging threats and develop remediation plans.
Collaborate with trusted 3rd party security auditors to identify vulnerabilities and remediate as required. Work with key stakeholders to translate regulatory requirements and standards into policies, processes and controls.
Assess changes to regulatory requirements and standards and determine impact on internal policies, controls and processes. Make recommendations for associated changes to policies, controls and processes, and simplify implementation.
Identify and evaluate technology risks, internal controls to mitigate risks, and related opportunities for continuous control improvement. Facilitate and document risk assessments and communicate key findings
Evaluate implementation of new technologies / processes and agreements with third-party service providers to ensure continual compliance with regulatory requirements.
Responding to RFPs about data protection, trust services, our attestations, etc.
Customer Contract reviews and negotiations regarding data protection clauses, related regulations and compliance commitments

QUALIFICATIONS:

Undergraduate degree in Information Management, Computer Science, Engineering, or emphasis in technology or related field
3 - 5 years of experience with information security and/or IT audit
Proficiency with Sarbanes-Oxley (SOX) and/or PCI work experience
Proven experience as an IT Security Specialist within a hybrid platform enterprise (cloud, hosted, on-premises)
Expert knowledge of vulnerability management, firewalls, Cisco networks ad Cloudflare WAF
Experience with Microsoft server hardening and Azure/O365 Advanced Threat Protection
Previous experience working for Big 4 in risk advisory / assurance an asset.
CISSP, CISA, CISM, CA, PCIP, QSA or similar certification are assets
Working knowledge of SIEM technologies
Familiarity with Zero Trust security principles and NIST Cybersecurity framework
Familiarity with public key infrastructure (PKI) and cryptographic protocols (e.g., SSL/ TLS)
An analytical mind with excellent problem-solving ability
Outstanding communication, decision making, and organization skills
BSc/BA in Computer Science, Information Technology or a related field; professional certification (e.g., CompTIA Security+, CISSP, CCNA) is a bonus

COMPENSATION AND BENEFITS

We offer a competitive salary and benefits package with opportunities for learning and career advancement.

All qualified candidates are encouraged to apply with your cover letter and resume. We thank all applicants for their interest, however only those candidates selected for interviews will be contacted.

PMRI encourages applications from all qualified candidates. Please let us know if you require accommodation at any stage of the application process or want more information on our accommodation policies.

Pharma Medica Research Inc.

New Jobs

Cybersecurity Specialist