Senior Risk Analyst - Information Security

FUJIFILM Biotechnologies is an industry leading Contract Development and Manufacturing Organization (CDMO) with locations in Teesside, United Kingdom; RTP, North Carolina; Holly Springs, North Carolina; Thousand Oaks, California; Hillerød, Denmark; and College Station, Texas. We use our skills, dedication, and ambition to enable impact for the world’s most innovative biotech and biopharma companies reimagining healthcare’s potential. We work across the entire lifecycle of our customer’s products – enabling success throughout. Every cure, vaccine, biologics, and advancement we contribute to starts with our people and our passion.

Experience a culture of curiosity, craftsmanship, and camaraderie at our United Kingdom facility, where diverse teams come together to solve meaningful challenges with real-world impact. Here, you’ll find a welcoming environment that values open dialogue, personal ownership, and continuous learning—backed by mentorship, cross-functional collaboration, and hands-on opportunities to grow. Our facility blends modern, purpose-built workspaces with a focus on well-being and balance, so you can do your best work and still enjoy life beyond the job. Whether your passion lies in operations, engineering, quality, or support functions, we offer a place to stretch your skills, share ideas freely, and build a career you’re proud of—alongside colleagues who celebrate wins and lift each other up.

Principal Accountabilities:

Supplier Assurance (10%):

• Conduct or support supplier risk assessments to evaluate supplier compliance with the Company security standards and regulations.
• Record findings and develop correction action plans to help improve any third -party risk management framework to mitigate cyber threats from external vendors.

Risk Management (40%):

• Develop and maintain a comprehensive risk management plan.
• Conduct thorough risk assessments to identify potential information security weaknesses in the organization's IT infrastructure and processes.
• Conduct security audits and provide feedback for continuous improvement of security posture.
• Support incident response efforts by investigating and responding to security breaches.
• Perform internal audits on implementation of risk controls and other security initiatives.

Solution Design and Assurance (10%):

• Collaborate with business, IT and security teams to implement effective security controls and measures.

Innovation and Improvements (10%):

• Stay up-to-date with the latest cyber threats, vulnerabilities, and technological advancements.

Policy Development and Enforcement (20%):

• Assist in the creation and maintenance of security policies, and procedures, and ensure organizational compliance with legal regulations.
• Educate employees on security best practices and promote security awareness across the organization.
• Maintains the organizations policies and standard operating procedures.

Reporting and Analytics (10%):

• Develop KPIs for information security management.

Minimum Education and Experience Required:

• Bachelor’s degree in Information Technology, Business Administration, Management, or a related field.
• 7–10 years of progressive, hands-on experience in information security, assurance, and risk management, with demonstrated ownership of complex, cross-functional initiatives.
• 8+ years of experience in Information Technology across infrastructure, applications, and/or cloud environments.
• In-depth knowledge of governance, risk, and compliance principles and frameworks.
• Proven experience from working in the pharmaceutical industry
• Proven experience working within global organizations, spanning across different regions and time zones

Preferred Education and Experience:

• Information Security, or GRC certifications are highly advantageous

Knowledge, Skills and Abilities:

• Ability to present topics with authority to auditors
• Excellent communication and interpersonal skills, with the ability to effectively communicate with technical and non-technical stakeholders
• Excellent stakeholder management skills