Associate Information Security Analyst

UBC is a pharmaceutical support industry leader devoted to empowering health solutions for a better tomorrow. The Associate Information Security Analyst supports the organization’s security program by assisting with the implementation, monitoring, and maintenance of controls designed to protect IT systems, data, and infrastructure.

What you'll do:

• Monitor security alerts and support the investigation, escalation, and resolution of potential security incidents
• Review phishing attempts, suspicious emails, and other reported security events to help determine appropriate next steps
• Support the management and maintenance of security configurations, policies, and access controls across cloud and on-premises environments
• Contribute to the vulnerability management process by supporting scans, reviewing results, tracking remediation activities, and maintaining related documentation
• Help implement and maintain security policies, standards, and procedures in alignment with organizational requirements
• Collaborate with IT teams to support the secure deployment, configuration, and operation of systems and applications
• Assist with quarterly and annual security audits by collecting evidence, documenting security processes, and maintaining records of security activities and incidents
• Participate in incident response activities under the direction of senior security or IT personnel
• Participate in an on-call rotation as needed, including nights and weekends
• Perform other duties as assigned

What they're looking for:

• 1–2 years of experience in IT, with exposure to information security tools, processes, and best practices
• Must have foundational knowledge of Microsoft Azure administration and security capabilities, including Microsoft Entra ID, Conditional Access, and Microsoft Defender for Cloud
• Must understand core security concepts, including authentication, authorization, identity and access management, vulnerability management, and incident response
• Must have an ability to review and analyze security related data, follow established procedures, and support the identification, escalation, and resolution of security issues
• Must have awareness of compliance and regulatory frameworks, such as HIPAA, GDPR, ISO 27001, and other applicable security or privacy requirements
• Relevant certifications a plus such as CompTIA Security+, Microsoft SC-900, Microsoft AZ-900, or other entry-level security, cloud, compliance, or identity certifications
• Familiarity with networking fundamentals and common operating systems, including Windows, macOS, and Linux is a plus
• Exposure to security monitoring and cloud security tools, such as Microsoft Sentinel, Microsoft Defender for Endpoint, and Microsoft Defender for Cloud is a plus

Benefits:

• Growth opportunities for promotion
• 401K with company match*
• Tuition reimbursement
• Flexible work environment
• Discretionary PTO (Paid Time Off)
• Paid Holidays
• Employee assistance programs
• Medical, Dental, and vision coverage
• HSA/FSA
• Telemedicine (Virtual doctor appointments)