> Markdown version of [/jobs/ext/1290290-it-security-risk-and-compliance-analyst-ii](https://www.wearedevelopers.com/jobs/ext/1290290-it-security-risk-and-compliance-analyst-ii). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # IT Security Risk and Compliance Analyst II - **Company:** United Therapeutics - **Location:** Silver Spring, MD, United States - **Experience:** Experienced - **Salary:** $91,000.0 - $125,000.0 - **Contract:** Permanent contract - **Skills:** Cyber Security, Software Vulnerability Management, Information Technology - **Published:** July 16, 2026 - **Apply:** https://www.juju.com/job/00000000ggmrik ## About the Role + H.S. Diploma or General Education Degree with at least 6 years of relevant work experience OR an Associate's degree with at least 4 years of relevant work experience OR a Bachelor's degree with at least 2 years of relevant work experience + At least 2 years of experience in information security + Superior organizational, prioritization, and time management skills + Ability to maintain a high level of integrity and confidentiality + Demonstrated problem-solving ability and analytical skills + Ability to interact, listen, and communicate effectively, both written and verbal with all stakeholders Preferred Qualifications + Experience working in the pharmaceutical/biotechnology industry + Experience in risk management + Experience with managing change control processes + SANS GSEC + Root cause analysis skills Job Location This is a hybrid role in Silver Spring, MD, and reports onsite at least 2 days a week. ## Description In this role, you'll collaborate closely with cross-functional teams to design, implement, and optimize creative and cutting-edge IT security, risk, and compliance programs. You'll be pivotal in driving security initiatives forward-coordinating, tracking, and reporting on key efforts to ensure alignment with our risk strategy and compliance goals. If you're passionate about impacting cybersecurity while working on innovative solutions, this is your opportunity! Join a dynamic team dedicated to securing the future of United Therapeutics. + Support the organization's Information Security, Risk and Compliance programs (e.g., Vulnerability Management Program) to effectively address information technology risks in alignment with the organization's risk appetite and to meet compliance requirements + Serve as a consultant to the organization to ensure understanding of and adherence to existing security, risk, and compliance principles and requirements + Develop and analyze reports and alerts to identify gaps and propose changes to improve the organization's security, risk and compliance posture + Evaluate existing and proposed technology solutions and provide recommendations and guidance to ensure business and security needs are adequately met + Participate in risk assessments, perform risk analysis, and partner with stakeholders to create treatment plans that achieve an acceptable level of risk + Participate in cross-functional teams, including third parties, in security, risk and compliance initiatives and driving them through to completion + Partner with other IT teams to successfully achieve organizational goals and objectives + Participate in incident response activities for all potential and declared IT security incidents and conduct root cause analysis and lessons learned reviews to ensure continuous process improvement + Monitor advancements in information privacy and security technologies to ensure organizational adaptation and compliance + Assist with creating and updating IT security and compliance documentation + Review and investigate security related cases, alerts and events + Monitor and provide oversight of IT security tools and platforms ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [What is the real price of one successful line of code?](https://www.wearedevelopers.com/videos/1921-what-is-the-real-price-of-one-successful-line-of-code) - [Enabling intelligent logistics automation: home-grown Industrial IoT platform at Austrian Post](https://www.wearedevelopers.com/videos/2018-enabling-intelligent-logistics-automation-home-grown-industrial-iot-platform-at-austrian-post) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Reporting Active Exploits in 24 Hours: Are You Ready for the CRA?](https://www.wearedevelopers.com/videos/100248-reporting-active-exploits-in-24-hours-are-you-ready-for-the-cra) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market) - [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk)