Security Operations Specialist for IT Security

Job Description

ITRMS – Security Operations Specialist for IT Security

Who we are 

Our company is an innovative, global healthcare leader that is committed to improving health and well-being around the world. Our product offering categories include heart and respiratory health, infectious diseases, and women's health. We continue to focus our research on conditions that affect millions of people around the world - diseases like Alzheimer's, diabetes and cancer - while expanding our strengths in areas like vaccines and biologics. We also devote extensive time and energy to increasing access to medicines and vaccines through far-reaching programs that donate and deliver our products to the people who need them.

The Security Operations are focused on Application and Process ITIL Operations. These Operations include such functional areas as Identity and Access Management, Corporate Directory and enterprise Cyber-Security tools and applications.

This organization was formed as a result of the increased risks in both the information security (e.g. cyber threats, malware, etc.) and the regulated areas have required that staffs possessing such skills are fully embedded within the IT organization. The enterprise is now dependent on these security and compliance experts for identifying, escalating and remediating such IT Risks in a timely and efficient manner. Also, emerging technologies like cloud, mobility and data analytics require strong IT Risk and Compliance early involvement.

Primary Activities include, but are not limited to:

• Management of IT Endpoint and Network Security platforms

• Participating in the onboarding of new technologies to ensure all assets can be supported in the production environment. 

• Act as IT Security Specialist supporting Engineering, Operations teams, and interfacing with other underpinning services.

• Partnering with ITRMS Divisions and working with Agile development teams.

• Support ITRMS use case development, roadmap, catalogue, and backlog management.

• Support projects including participation in design, review documentation, development, testing, from an agile environment perspective as well as adoption and capturing value realization.

• Ensure there is alignment with the IT Infrastructure Security Platform Governance (Engineering) and SDLC is followed.

• Monitor and track IT Infrastructure Security product usage and performance.

• Ensure all Security tools are fully operational and limit downtime to only required intervals

• Optimize Security infrastructure for maximum protection and efficiency

• Correlate related Security Incidents/Events, Service Requests, Changes and Work Orders where information is available and supported by the functionality of Supplier-managed tools, processes, and solutions, execute analysis and diagnostic processes to determine technologies affected and determine business impact of the Incident(s), or multiple technologies, affected by the disruption.

• Ensure all open cases and alerts are effectively managed through containing, resolving, and/or providing all available information to our company's teams and Partners to work to resolve Security Incidents based on our company's -approved Security Incident prioritization process as defined in the Policies and Procedures Manual.

• Possess the appropriate skills and qualifications to provide technical Security Services, including effective oral and written communication skills and an our company's -focused attitude (correct, polite, helpful, understanding, clear and understandable language speaking, listening and writing skills).

• Use ServiceNow, JIRA and other reporting tools

• Identify recurring issues and propose runbook improvements 

• Perform deeper initial investigations before escalation 

• Continue to be aware of all Service Management Processes (incident, work order, problem, change management procedures).

Evaluation Criteria:

• An understanding of business needs and commitment to delivering high-quality, prompt, and efficient service to the business.

• An understanding of organizational mission, values, and goals and consistent application of this knowledge

• Decision-making capabilities, with a proven ability to weigh the relative costs and benefits of potential actions and identify the most appropriate one.

• An ability to work extremely well under pressure while maintaining a professional image and approach.

• An ability to perform independent analysis of complex problems and distill relevant findings and root causes.

• An ability to communicate complex and technical issues to diverse audiences, orally and in writing, in an easily understood, authoritative, and actionable manner.

• A team-focused mentality with the proven ability to work effectively with diverse stakeholders.

• Self-motivation, personal drive and high energy.

Ideal Skillset:

• Knowledge of Endpoint and Network Security

• Demonstrated ability to work independently and as part of global teams in a fast-paced global environment.

• Familiarity with laws and regulations, such as PCI and GDPR.

• Excellent verbal and written communications skills in English.

• Familiarity with Agile methodology is beneficial.

We offer:

• Competitive remuneration

• Position in a world leading global company

• Challenging career

• Professional growth based on performance

• Innovative working environment

• Wide range of benefits

Qualifications:

• Education: BS in Information Security, Computer Science or Engineering or equivalent experience
• Knowledge of ITIL and Agile
• Must have excellent verbal and written English skills along with the ability to work with both a team and independently.

Our employees are the key to our company’s success. We demonstrate our commitment to our employees by offering a competitive and valuable rewards program. Our Company’s benefits are designed to support the wide range of goals, needs and lifestyles of our employees, and many of the people that matter the most in their lives.

Required Skills:

Agile Application Development, Agile Methodology, Availability Management, Backlog Management, Change Controls, Computer Science, Emerging Technologies, Incident Management, Infectious Disease, Information Security, Information Technology (IT) Infrastructure, IT Security Operations, Management System Development, Motivation Management, Problem Management, Quality Assurance (QA), Self Motivation, Service Delivery, SLA Management, Software Configurations, Software Development Life Cycle (SDLC), Testing, Working Independently

Preferred Skills:

Current Employees apply HERE

Current Contingent Workers apply HERE

Search Firm Representatives Please Read Carefully 
Merck & Co., Inc., Rahway, NJ, USA, also known as Merck Sharp & Dohme LLC, Rahway, NJ, USA, does not accept unsolicited assistance from search firms for employment opportunities. All CVs / resumes submitted by search firms to any employee at our company without a valid written search agreement in place for this position will be deemed the sole property of our company.  No fee will be paid in the event a candidate is hired by our company as a result of an agency referral where no pre-existing agreement is in place. Where agency agreements are in place, introductions are position specific. Please, no phone calls or emails. 

Employee Status:

Regular

Relocation:

VISA Sponsorship:

Travel Requirements:

Flexible Work Arrangements:

Hybrid

Shift:

Valid Driving License:

Hazardous Material(s):

Job Posting End Date:

07/21/2026

*A job posting is effective until 11:59:59PM on the day BEFORE the listed job posting end date. Please ensure you apply to a job posting no later than the day BEFORE the job posting end date.