IT Security Specialist II- Incident Response

Department: Global Information Security – GBS (Global Business Services)

Are you an experienced IT security professional with a passion for incident response? Do you thrive in a global environment and enjoy collaborating with cross-functional teams? If so, we have an exciting opportunity for you to join our Security Operations Centre as a Security Specialist. Apply today and be part of a team dedicated to protecting Novo Nordisk’s information assets. Apply Now!

The position

As an IT Security Specialist, you will be working on a portfolio of services at DD&IT GBS, Security Operations Center. The services include IT Security Incident response, Intrusion detection, Intrusion prevention, Assess Vulnerabilities and follow up as required, performing follow up on raised IT Security incidents, analyze emails coming in via the Phish alarm solution across the organization. You shall be a member Global Security Operations (GSO)at DD&IT (Digital Data & IT) GBS and will work with Global Security Operations (GSO) in EMEA (Europe, Middle East and Africa), Americas and Mexico. The role also entails understanding the challenges within IT Security area and ensuring monitoring, fixing the present security solutions and being part of the of the Global Information Security team in Novo Nordisk. You will have the following primary responsibilities:

• As L3 analyst, responsible for handling 3rd party breaches, determine and implement actions required to protect Novo Nordisk's exposure to such incidents and interact with internal data protection teams towards incident resolution.
• Handle potential IT security incident notifications from users, external attack surface monitoring solution & vendors and regional security responsibility across Novo Nordisk. 
• Be an interface to Novo Nordisk by handling emails coming into the GSO Mailbox. Contribute and support Vulnerability management office (VMO) in the Critical vulnerability response (CVR) process.
• Collaborate with the GSO Data Analytics, detections and automation track and ensure reduction of false positives for content coming into the SIEM (Security Information and Event Management). Support Global IT Security projects.
• Analyse and handle suspicious and malicious emails coming in via Phish alarm solution. Interact with GSO operations in Denmark, GSO operations in US (United States), and customers at all levels of the organization.
• Participate in IR (incident response) drills and ensure adherence to Major IT Security Incident response process (MSIRP) when required.

Qualifications

To be successful in this role, you should have:

• A bachelor’s or master’s degree in engineering with relevant IT and business experience.
• 10+ years of core experience working within IT Security, with at least 8 years of incident response experience.
• Good understanding IT security tools such as SIEM (good to have SPLUNK or any other technology is good), anti-Virus, network, security solution, knowledge in enterprise network will be good to have.
• Knowledge of Forensics is a must have and threat intelligence preferred.
• It is good to have Security certifications like CEH etc., certification or Training on Incident response, forensics or cloud like AWS/Azure cloud is preferred.
• Must exhibit good experience in investigating and analyzing security incidents, including data breaches, malware infections, and unauthorized access attempts.
• Should be skilled in using security event correlation tools and in designing incident response for cloud service models.
• Coordinate with internal teams and external stakeholders to manage the incident response process.
• Up to date with the latest security trends and technologies to ensure the organization's security posture remains strong.
• Collaborate with cross-functional teams to ensure security policies and procedures are being followed.
• Considerable personal impact by demonstrating high integrity, flexibility in workplace, change adaptation and superior team player mentality.
• Self-managed, strong personal drive and desire to learn and enhance skills in IT Security.
• Excellent communication skills written and orally in English and Spanish
• Good interpersonal skills

About the Department

The Global Information Security Advisory department is based in Digital, Data, and IT (DD&IT) in Denmark. You will be part of a global information security community with colleagues located primarily in India, Denmark, and USA (United States). Our team consists of leading experts in various areas ranging from network security, white hat hacking, cloud security, cryptography, security operations, Acquisitions & Integrations, to manufacturing security and security risk management and governance. We partner with the line of business across the value chain to build security into the business processes, collaborating with specialists in other areas including Enterprise Architects and Data Specialists. As security partners, we engage with stakeholders to understand their priorities and identify and manage risks.

Working at Novo Nordisk

Novo Nordisk is a leading global healthcare company with a 100-year legacy of driving change to defeat serious chronic diseases. Building on our strong legacy within diabetes, we are growing massively and expanding our commitment, reaching millions around the world, and impacting more than forty million patient lives daily. All of this has made us one of the twenty most valuable companies in the world by market cap. Our success relies on the joint potential and collaboration of our more than 63,000 employees around the world. We recognize the importance of the unique skills and perspectives our people bring to the table, and we work continuously to bring out the best in them. Working at Novo Nordisk, we are working toward something bigger than ourselves, and it is a collective effort. Join us! Together, we go further.

Contact

To submit your application, please upload your CV online (click on Apply and follow the instructions).

Deadline

24th May 2024

We commit to an inclusive recruitment process and equality of opportunity for all our job applicants. 

At Novo Nordisk we recognize that it is no longer good enough to aspire to be the best company in the world. We need to aspire to be the best company for the world and we know that this is only possible with talented employees with diverse perspectives, backgrounds and cultures. We are therefore committed to creating an inclusive culture that celebrates the diversity of our employees, the patients we serve and communities we operate in. Together, we’re life changing.