Cybersecurity Analyst (Insider Threats)

Overview Cybersecurity Analyst (Insider Threats) – Madrid. Full-time. Posted today. Roche is an Equal Opportunity Employer.

The Position We are seeking an experienced Cybersecurity Analyst with expertise in data security, data loss prevention mechanisms, insider threats detection, and related areas to join the Global Monitoring and Incident Response team. You will design, implement, and monitor controls and technologies around data storage and data transfers aligned with the Roche Group’s IT Security strategy. Working with multiple business units globally, you will help the Roche group keep information safe.

Responsibilities Contribute to the definition of data security strategy and operating models around collaboration platforms such as Salesforce, Google Workspace, Microsoft Office 365, Box, Alibaba Drive, Tencent Drive, Veeva Docs, etc.

Articulate and contribute to the strategic direction of the organization regarding data security, ensuring alignment with strategic themes, while performing analyst duties.

Support the adoption of best practices for data security across internally developed applications, through developer education and auditing of controls.

Design and implement a baselining process, supporting regular reviews of the network applications and protocols in use in the environment.

Design, develop, implement, and maintain detection use cases leading to investigations and refinement of data security controls in the environment.

Lead or participate in investigations related to data security and collaborate with teams such as Legal, Internal Investigations, and Data Privacy.

Collaborate with cross-functional teams to implement security controls, mitigate risks, and enhance the overall security posture.

Establish rapport and act as a liaison with internal audit, compliance, scientific, regulatory, and legal teams to address security concerns and translate requirements into technical controls when applicable.

Assess the requirements of various business lines and align solutions to balance enablement with appropriate security controls.

Participate and provide support to the Monitoring and Incident Response team during exercises and incidents.

Qualifications Bachelor's degree in Computer Science, Information Technology, or related field; or at least four years of equivalent work experience.

3+ years of experience in Data Loss Prevention and Insider Threat; demonstrable passion for this area of security is highly desired.

1–2 years experience deploying, configuring, and maintaining commercial DLP solutions or ecosystems such as Google BeyondCorp Enterprise or Microsoft Purview.

Experience developing custom tools or scripts for security automation and incident response. Proficiency in scripting languages such as Python, Go, PowerShell, or Bash is required.

Experience with large dataset manipulation is desired. Experience with Splunk, BigQuery is a plus.

Relevant cybersecurity certifications (e.g., CISSP, GIAC) are optional but highly desired.

Knowledge of investigative processes for DFIR and user-centric investigations.

Excellent analytical skills, attention to detail, and problem-solving abilities. Ability to work independently or in a team with minimal supervision to design, implement, and manage DLP solutions.

Effective English writing and communication skills to articulate technical controls and recommendations to technical and non-technical stakeholders.

Familiarity with common data classification frameworks is a plus. International experience in a global organization is a plus.

About Roche Let’s build a healthier future, together. Roche employs over 100,000 people worldwide, delivering medicines and diagnostics that impact global health. We strive to innovate and empower our teams to deliver life-changing solutions.

#J-18808-Ljbffr