Security Analyst III

About the Department 

The Finance & Operations department brings insights and intelligence to inform decision making & drives digitalization and business solutions to attain NNI goals. Finance & Operations works closely across the organization to guide enterprise-wide resource allocations, investment choices, drive core operations and develop insights to drive growth and operational excellence across the value chain while innovating for future capabilities. Our focus on innovation ensures we're constantly building future capabilities. We're responsible for regulating accounting, upholding workplace safety, managing our supply chain and sampling, supporting technological and data innovation, maintaining our facilities and assuring the integrity and completeness of all business transactions. At Novo Nordisk, you will have the opportunity to build a career in a global business environment. We encourage our employees to make the most of their talent, and we reward hard work and dedication with opportunities for continuous learning and personal development. Are you ready to maximize your potential with us?

The Position

This highly technical position directly participates in Global Security Operations activities including prevention, detection, and response to IT security incidents worldwide. The IT Security Operations Specialist will support a wide range of IT security activities including monitoring of alerts, investigation of alerts, incident response, vulnerability response, threat intelligence, and digital forensics. Individuals in this position will also have additional duties assisting with the implementation of IT security strategy and serving as a security advisor to ensure IT systems are implemented and maintained to the highest security standards. Individuals in this position will demonstrate expertise of current enterprise technologies and will also be responsible for performing technical risk and vulnerability assessments at the network, system, and application level. Some responsibilities developing and implementing security controls and formulating operational risk mitigations.

Relationships

Reports directly to the manager of Global Security Operations - Americas. Will work closely with IT operations staff, application development teams, system managers, and line of business representatives. This role will interface routinely with key stakeholders including senior security operations personnel, Global Security Operations management team, line of business personnel as well as third party technology service providers.

Essential Functions

• Demonstrates high knowledge in multiple domains of IT Security and subject matter expertise in at least one domain such as incident response, vulnerability assessment, or threat intelligence
• Works under only general direction. Independently determines and develops approach to solutions. Provides technical solutions to a wide range of difficult problems
• Handles complex tasks such as security event analysis, vulnerability assessment, and reporting with no defined procedures in place
• Often sets directions and delivers results in own role which have a significant impact to the Global Security Operations organization or its stakeholders in areas such as incident response, vulnerability management, and threat intelligence through application of expertise and established process in these functions
• Provides guidance and training to less experienced professional or support staff. Demonstrates leadership capabilities. Assists in leading a project in the development and implementation of processes and programs
• Leverages knowledge of topics such as networking, operating systems, application architecture, cloud, log management, SIEM, SOAR, case management, and investigative techniques
• Serves as area specialist within one or several functions across Global Security Operations. Within these functions the individual recognizes and responds to stakeholder needs and ensures commitments are delivered upon
• Engages in frequent internal and cross-organizational contact. Works closely with external vendors. Represents organization in providing solutions to difficult technical issues associated with specific projects
• Operates common tools and systems for vulnerability assessment, penetration testing, network intrusion detection, intrusion prevention, network analysis, log management, SIEM, and SOAR. Applies subject matter knowledge to solve common needs such as