[Netherlands] Senior Cybersecurity Analyst, Global Information Security

Company Description

As a specialized company dedicated to eye health, Santen aspires to contribute to the realization of “Happiness with Vision” by providing valuable products and services to patients, consumers, and medical professionals around the organization.
Since its establishment in Japan in 1890, and guided by its CORE PRINCIPLE, “Tenki ni sanyo suru,” Santen has been committed to helping people maintain and improve their eye health, and is engaged in the global research and development, manufacturing, and sales and marketing of pharmaceutical products in the field of eye care, supporting the eye health of approximately 50 million people worldwide. Our duty is to create a future in which as many patients and consumers as possible can lead happy and fulfilling lives, we will continue to contribute to the realization of better eye care by providing solutions that eliminate bottlenecks in the diagnosis and treatment of eye diseases, thereby revolutionizing the treatment flow.
Each of us is deeply committed to challenging ourselves, building an organization that brings together diverse internal talents and external expertise, and to doing our utmost to realize a society in which people everywhere can feel happy through vision-related experiences. Isn't it exactly the kind of environment you want to belong in? 

Job Description

Job’s mission

Under the direct supervision and guidance of the Cybersecurity Manager, the job holder is part of the Global Information Security Function (Digital & IT Division), responsible for execution of Global Cyber Defense Strategy, implementation of a sound global information security incident management process to protect Santen from cyberattacks, supporting the risk and vulnerability management processes which is in line with security regulations, standards and best practices, managing the SOC (Security Operations Center) partner, managing cybersecurity projects in order to ensure that information assets are adequately protected and compliant as well as maximize the benefit of information systems for Santen’s global businesses. No direct subordinates as of the recruitment date however there will be several Digital & IT members and external consultants whose activities need to be coordinated by this role within the framework of cybersecurity projects or processes. Key Responsibilities & Accountabilities:

Security Incident Management

• Lead the investigation, analysis, and resolution of security incidents, ensuring swift and effective response. 
• Collaborate with the SOC team to monitor and prioritize incidents, implementing containment. With the involvement of cross functional team as necessary, for eradication, and recovery measures. 
• Improve the incident response plans, playbooks, and standard operating procedures, and making sure the known issues are addressed according to risk management methodology.
• Conduct post-incident reviews and develop actionable recommendations to prevent recurrence. 
• Participate in regular operational discussions with SOC team, for incident coordination and to improve the overall process.
• Manage the monthly operational meetings between SOC team and Santen, improve the overall process and ensure the KPIs are achieved.
• Track KPIs (including Azure Sentinel Services related ones) to measure the effectiveness of the incident response process. 
• Compliancy reporting for all endpoint & servers & log sources with relevant security controls & configurations. 
• Support the Disaster Recovery and Business Continuity related initiatives specific to Information security incident management.

Vulnerability Management

• Improve the Global Vulnerability Management Program focused on reducing the risk presented by vulnerabilities in Santen environment by continuously performing three core steps; Discovery, Reporting and Remediation.
• Continuously monitor vulnerability sources and threat intelligence feeds to stay ahead of emerging threats.
• Guide the technical teams (Global Infra, Regional Infra and Application teams, critical third parties) to make sure vulnerabilities are mitigated in a timely manner.
• Participate and contribute to regular vulnerability scan and penetration test activities to support the team. 
• Recommend and coordinate security controls to mitigate identified vulnerabilities. 
• Monitor external threat landscapes and translate findings into actionable insights for the organization. 
• Utilize existing tools & services for emerging threats against company assets, and corelate the events with incident management.

Cybersecurity Defense & Management

• According to the company’s long-term v