Information Security Analyst

Please note that the role requires relocation to Armenia (relocation support provided).

The Senior Information Security Analyst (Biotech / Life Sciences) is responsible for supporting and enhancing the organization’s cybersecurity posture across enterprise systems, cloud platforms, laboratory environments, scientific applications, and research infrastructure. This role works closely with IT, engineering, R&D, compliance, and scientific teams to identify, assess, and mitigate cybersecurity risks while ensuring alignment with industry regulations and security best practices.

The Senior Information Security Analyst will support threat detection, vulnerability management, incident response, security monitoring, regulatory compliance, and data protection initiatives within a highly regulated biotechnology environment. The role requires strong analytical, technical, and communication skills, along with the ability to collaborate effectively across cross-functional teams and support secure business operations while protecting sensitive research, genomic, clinical, and intellectual property data.

This position will report to the Sr. Information Security Manager, or designated cybersecurity leadership.

Responsibilities

Threat and Vulnerability Management 

• Conduct risk assessments, vulnerability scanning, and penetration testing across on-premise and cloud environments (AWS, Azure, GCP)

• Perform threat intelligence analysis focused on biotech/pharma risks (IP theft, targeted attacks) 

• Prioritize and remediate vulnerabilities based on risk and business impact

• Validate security posture of laboratory systems, research platforms, and scientific applications 

Security Monitoring and Detection 

• Monitor systems and networks using EDR/XDR and SIEM platforms (e.g., Splunk, SentinelOne, QRadar)

• Develop and tune detection rules for unauthorized access, data exfiltration, insider threats

• Integrate logs from cloud, endpoints, identity systems, and lab-related systems 

• Support security operations and incident triage

Incident Response and Investigation 

• Investigate security incidents and perform root cause analysis

• Support containment, eradication, and recovery efforts 

• Conduct forensic analysis across endpoints, cloud, and network logs 

• Develop and maintain incident response playbooks 

• Coordinate with legal, compliance, and leadership during major incidents 

Biotech Data Protection 

• Protect intellectual property, genomic data, clinical trial data, and research assets

• Implement and monitor data loss prevention (DLP) controls

• Ensure proper data classification and segregation 

Compliance and Regulatory Security 

• Ensure compliance with: GxP (GMP, GCP, GLP), HIPAA, FDA 21 CFR Part 11, GDPR and data privacy regulations 

• Support audits and regulatory assessments 

• Maintain compliant documentation and procedures 

Risk Management and Governance 

• Support frameworks such as ISO 27001, NIST, SOC 2 

• Develop and maintain policies, standards, and procedures 

Security Awareness and Training 

• Develop and deliver security awareness programs

• Train employees on: phishing awareness, data protection, regulatory responsibilities 

Third-party and Vendor Security 

• Assess security posture of vendors and research partners 

• Review contracts for security requirements 

• Monitor and manage supply chain risk 

Reporting and Metrics 

• Develop and track security metrics and KPIs 

• Report on incident trends, vulnerability posture, compliance status, present findings to management 

Additional Responsibilities 

• Support business continuity and disaster recovery planning 

• Evaluate and onboard new technologies 

• Stay current with emerging cybersecurity threats in biotech/pharma 

• Perform other duties as assigned by management

Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Engineering, or related field, or equivalent practical experience.

• Experience working in regulated industries such as biotechnology, healthcare, pharmaceutical, or life sciences is preferred.

• Ability to analyze security incidents, vulnerabilities, and operational risks in enterprise and cloud environments.

• Professional experience in one or more of the following areas: Information Security, Cybersecurity Operations, Vulnerability Management, Incident Response, Security Monitoring, Cloud Security, Risk Management, Security Compliance

• Familiarity with cybersecurity frameworks and standards, including NIST, ISO 27001, SOC 2, HIPAA/HITECH, FDA 21 CFR Part 11, GDPR

• Experience with security technologies and tools such as SIEM platforms, EDR/XDR solutions, vulnerability scanning tools and penetration testing tools, Data Loss Prevention (DLP) technologies

• In-depth experience in threat detection and response, security operations, risk assessments, identity and access management, secure system administration, data protection principles

• Strong verbal and written communication skills with the ability to work collaboratively across technical and nontechnical teams.

Our offering

Join our team at BostonGene, where your work makes a real difference! As a pioneering biotech company with a global footprint, we're passionate about improving lives through groundbreaking oncology personal healthcare. With a team of over 500 dedicated professionals, we foster an empowering environment where your unique skills contribute to a healthier, better world. At BostonGene, you're not just choosing a career; you're stepping into a role that leverages your talents to create a positive change. Discover a workplace that values you as its most precious asset, offering a competitive benefits package designed to enhance your life and those around you.

We offer:

• Full-time position with a permanent contract and flexible working hours, with hybrid work options.

• Competitive salary and comprehensive healthcare insurance.

• Convenient office location in Yerevan (1-minute walk from the metro) with on-site snacks.

• Relocation package for candidates and their immediate family members, including full documentation and bureaucracy support (bank accounts, residence permits, school contacts, etc.).

• Corporate benefits, including English language lessons and gym membership.

• Dynamic and versatile professional environment with a diverse team of bioinformaticians, biologists, physicians, and software developers committed to improving oncological healthcare.

• Careful, structured, and responsible supervision to support professional growth.