Security Analyst

Náplň práce, právomoci a zodpovednosti:

You will be the hands-on security person for MagnaPharm, a sales & marketing pharmaceutical Group active in 17 CEE countries. Day-to-day you will monitor and respond to security events, support our NIS2 compliance programme, and help local IT teams keep things secure – working on a modern, fully-licensed Microsoft E5 security stack (Defender XDR, Sentinel, Intune, Purview) with group-level standards and tooling behind you.

You will report to the MagnaPharm CIO

Responsibilities:

Security operations

• Monitor security alerts in Microsoft Defender and Sentinel; investigate, escalate and coordinate incident response with local IT teams.

• Run vulnerability management and follow up remediation with local and group IT.

Microsoft platform security

• Help maintain and improve the security configuration of our Microsoft environment – Entra ID (Conditional Access, MFA), Intune device compliance, email protection, data protection – and drive our Secure Score up over time. You will not own all of this alone from day one: you grow into it with group support.

NIS2 & compliance

• Support the NIS2 implementation across our entities: documentation, evidence collection, incident reporting.

• Support audits, risk assessments and supplier security reviews.

• Coordinate security awareness training and phishing simulations.

Partnering

• Be the go-to person for local IT and business teams on security questions.

• Work closely with the Dr. Max group security team on standards, tooling and reporting.

Where you can grow – AI security

As MagnaPharm adopts AI tooling, you can grow into the security side of it: AI license and access management, data-handling rules for AI use, and securing internal AI agents before go-live. Interest matters more than experience here.

What we are looking for

• 3+ years hands-on experience in IT infrastructure, networking or system administration – network/firewall administration, sysadmin, M365 or Azure administration. This is the foundation we want.

• Working familiarity with Microsoft 365 / Azure environments.

• Genuine interest in security. Some exposure – hardening, access management, incident handling – is a plus; formal security experience is not required.

• A structured way of working, curiosity, and the ability to learn fast.

• Good written and spoken English.

Nice to have

• Any security certification or coursework (SC-900, Security+, AZ-500, SC-200) – or the willingness to obtain one with our support.

• Exposure to ISO 27001, NIS2 or GDPR topics.

• Pharma or healthcare industry experience.

Zamestnanecké výhody, benefity:

What we offer

• A real transition path into cybersecurity – certification budget, structured learning time, and direct mentoring from a CISM-certified manager.

• Group-level exposure from day one: 17 countries, a live NIS2 programme, and a modern Microsoft E5 security stack.

• Possibility to work fully remotely.

• A front-row seat on AI adoption – and AI security – in a regulated industry.

Benefits

• Cell phone

• Notebook

• Work mostly from home

• Individual schedules of working hours

• Launch of a completely new project

• Meal tickets / catering allowance

• Holidays 5 weeks

• Bonuses

• Sick days

• Flexible start/end of working hours

• Contribution to sport / culture / leisure

• Cafeteria