Security/Server Analyst

About the Role

The Security Analyst will be responsible for safeguarding Made Scientific’s digital infrastructure, proprietary data, and regulated information, including GMP and client data, against internal and external threats. This role ensures compliance with industry standards such as GxP, FDA 21 CFR Part 11, ISO 27001, and other relevant cybersecurity frameworks. The analyst will monitor, assess, and improve security measures across manufacturing, R&D, and corporate systems while also supporting server administration activities, including server maintenance, patching, hardening, monitoring, and troubleshooting to ensure secure, reliable infrastructure operations.

Key Responsibilities

• Conduct regular vulnerability assessments and penetration tests on IT systems and OT (Operational Technology) used in manufacturing.
• Manage access controls and identity management for ERP Systems, Azure Cloud, O365 and Active directory.
• Administer and maintain Windows and/or Linux servers, including patching, hardening, monitoring, backup coordination, and performance troubleshooting.
• Ensure compliance with regulatory requirements (FDA, EMA, HIPAA if applicable) and internal SOPs.
• Support audits related to information security and data integrity.
• Implement security monitoring tools using security frameworks such as NIST.
• Monitor network traffic, endpoints, and cloud environments for suspicious activity using SIEM tools.
• Investigate and respond to security incidents, breaches, and anomalies promptly.
• Maintain and update incident response and disaster recovery plans.
• Support server lifecycle management activities, including provisioning, configuration, documentation, change control, and decommissioning in alignment with IT and compliance requirements.
• Develop and enforce cybersecurity policies aligned with CDMO operations.
• Conduct security awareness training for staff, focusing on data integrity and confidentiality in GMP environments.
• Work with Network engineer to implement and maintain firewall policies.
• Implement intrusion detection/prevention systems, and endpoint protection.
• Oversee secure configuration of laboratory and manufacturing systems (e.g., MES, LIMS).
• Work closely with QA, Regulatory Affairs, and IT teams to ensure secure handling of client IP and batch records.
• Liaise with third-party vendors to validate security compliance.

Required Qualifications

• Bachelor’s degree in IT or related field.
• Minimum 5 years of hands-on experience in Cyber Security.
• Knowledge of GxP compliance and data integrity principles.
• Familiarity with security frameworks (ISO 27001, NIST).
• Proficiency with SIEM tools, vulnerability scanners, and endpoint security solutions.
• Experience with Microsoft tools and Azure environmenets.
• Hands-on experience with server administration, including Windows Server, Active Directory, DNS, DHCP, patch management, system monitoring, and backup/recovery processes.
• Strong infrastructure security background (endpoint, network, systems).
• Familiarity with security automation and scripting.
• Excellent collaboration and communication skills.

Preferred Skills

• Experience with cloud security (Azure/AWS) and OT cybersecurity.
• Understanding of regulatory environments for CDMO operations.
• Experience supporting virtualized server environments such as VMware, Hyper-V, or cloud-based infrastructure services.
• Certifications: CISSP, CISM, CompTIA Security+, or equivalent.