[Remote] Information Security Associate Analyst
Note: The job is a remote job and is open to candidates in USA. Zimmer Biomet is a global medical technology leader committed to enhancing patient mobility. They are seeking an Information Security Associate Analyst to architect, implement, and secure security solutions across IT and OT environments while collaborating with cross-functional teams to drive data protection outcomes.
Responsibilities
- Design & Operations: Architect, implement, configure, integrate, and operate security systems and controls across IT/OT, on-prem, and cloud
- Microsoft Purview: Deploy and administer Purview capabilities (sensitivity labels/classification, DLP policies, eDiscovery/Legal Hold, data lifecycle/retention, insider risk) and drive data protection outcomes with legal/compliance partners
- Identity & Access: Support IGA processes, privileged access management, conditional access, MFA, and role-based access controls across hybrid identity platforms
- Network Security: Operate and improve network security controls (firewalls, IDS/IPS, VPN, DMZ segmentation), evaluate change requests against standards, and participate in incident troubleshooting
- Individual as well as group projects delivery. Strong collaboration with Governance, Risk, and Compliance (GRC) team, the Architecture and Advisory team, and the Incident Response (IR) team
- Security Engineer may be tasked with operating security controls as part of an ISO 27001-based Information Security Management System (ISMS), and reporting their efficiency to stakeholders
Skills
- Design & Operations: Architect, implement, configure, integrate, and operate security systems and controls across IT/OT, on-prem, and cloud
- Microsoft Purview: Deploy and administer Purview capabilities (sensitivity labels/classification, DLP policies, eDiscovery/Legal Hold, data lifecycle/retention, insider risk) and drive data protection outcomes with legal/compliance partners
- Identity & Access: Support IGA processes, privileged access management, conditional access, MFA, and role-based access controls across hybrid identity platforms
- Network Security: Operate and improve network security controls (firewalls, IDS/IPS, VPN, DMZ segmentation), evaluate change requests against standards, and participate in incident troubleshooting
- Individual as well as group projects delivery. Strong collaboration with Governance, Risk, and Compliance (GRC) team, the Architecture and Advisory team, and the Incident Response (IR) team
- Security Engineer may be tasked with operating security controls as part of an ISO 27001-based Information Security Management System (ISMS), and reporting their efficiency to stakeholders
- Microsoft Purview (DLP, eDiscovery, Information Protection
- Operating Systems: Microsoft Windows Server; Linux/UNI
- Cloud Platforms: AWS, Google Cloud Platform, Microsoft Azure
- Productivity: Microsoft 365 / Microsoft Office
- Network Security: Enterprise firewalls, IDS/IPS, VPN (vendor-agnostic; Cisco/Fortinet/Palo Alto experience a plus)
- Scripting / coding (Python, PERL, BASH, PowerShell, etc.)
- Excellent communication skills (both oral and written)
- Must be a self-starter, able to work independently, and in a fast-paced environment
- Minimum Qualification: Bachelor's Degree and 0 years of relevant experience, or Associate's Degree and 2 years of relevant experience, or High School Diploma or Equivalent and 4 years of relevant experience
- Undergraduate degree (Computer Science or similar)
- Cloud, networking, and / or Windows Server / Linux Certifications
- Experience with ISO 22301
- Vendor and technical certifications in BCM or BCP/DR
Benefits
- Development opportunities
- Robust employee resource groups (ERGs)
- A flexible working environment
- Location specific competitive total rewards
- Wellness incentives
- A culture of recognition and performance awards
Company Overview
Company H1B Sponsorship