Information Security Analyst

Description

Job Summary: Scienza is seeking an Information Security Analyst to lead regulatory compliance and ISO 27001 risk management, combining documentation and auditing with operational controls. Key Highlights: 1. Lead regulatory compliance and ISO 27001 risk management 2. Administer ISMS policies and conduct internal/external audits 3. Monitor security platforms and manage vulnerabilities At Scienza, we are looking for an Information Security Analyst to join our Systems Management team. The primary objective of this role is to lead regulatory compliance and risk management under the ISO 27001 standard, integrating documentation and auditing with the practical execution of information security operational controls. **Your main challenges will be:** **Documentation and Regulatory Management:** Draft, update, and administer ISMS policies and procedures (ISO 27001\). **Audits and Risk Management:** Plan and conduct internal audits, support external audits, and perform technological risk assessments. **Technical Control Operations:** Monitor and manage security platforms (Active Directory, antivirus/NDR consoles, vulnerability scanners) and execute access/permission reviews. **Vulnerability and Incident Management:** Collaborate with IT/Development teams on remediation plans, patching, and resolution of security incidents. **Culture and Reporting:** Participate in Business Continuity Plans (DRP) and develop control dashboards (KPIs/KRIs) for senior management. **Employment Conditions:** **Work Location:** Hornos Office (CABA). **Working Hours:** Monday to Friday, 9 a.m. to 6 p.m. We are proud of who we are. We are the leading company in the marketing, distribution, and management of medications for oncology treatments, antiretrovirals, transplants, and specialized therapies. We have become the most trusted link between healthcare providers, pharmaceutical manufacturers, and healthcare facilities through which we reach patients. We guarantee the highest quality standards across all our processes. Committed to patient health, we continuously improve our services, incorporate technology, innovate, invest, and assume our social responsibility. Requirements What are we looking for? **Experience:** Minimum 2 years in similar roles such as Systems Auditing, Cybersecurity, or GRC. **Technical Knowledge:** Strong command and hands-on experience with the ISO 27001 standard (Mandatory). Practical knowledge of Active Directory (access management) and defensive security monitoring tools. Basic understanding of networking, operating systems (Windows/Linux), and cloud environments (AWS/GCP). Knowledge of SOX, SOC1/SOC2 regulations will be valued. **Education:** Currently enrolled in or graduated from a university program in Computer Science or related fields. Benefits We offer excellent employment conditions