Role Description We're looking for an IT Security Analyst to join our team and help protect Envision Pharma Group's digital assets through proactive monitoring, incident response, and operational security excellence. In this role, you will work closely with internal IT teams and external security partners to detect, investigate, and respond to security events while strengthening the organization's overall security posture. This is an excellent opportunity for an experienced IT professional who enjoys solving complex problems, improving security operations, and collaborating across teams to reduce risk in a fast-moving, global technology environment. This role is remote in Portugal. Role responsibilities - Provide day-to-day operational ownership of Envision's security platforms, collaborating closely with external SOC providers and internal IT teams. - Lead and manage security incidents through the full lifecycle, including investigation, containment, remediation, and post-incident review. - Execute and continuously improve vulnerability management processes, coordinating remediation with infrastructure, application, and operations teams. - Design, implement, and maintain technical security controls across cloud and on-premises environments. - Monitor, analyze, and tune security telemetry (SIEM, EDR, identity, network, and cloud signals) to improve detection quality and response time. - Support compliance and audit activities (ISO 27001, SOC 2, customer security reviews) through evidence generation and control validation. - Develop and maintain security operations metrics, KPIs, and KRIs to communicate risk posture and operational effectiveness. - Create and maintain security runbooks, procedures, and operational documentation. - Participate in incident response exercises, tabletop simulations, and continuous readiness activities. - Provide guidance and mentorship to operational IT teams on secure practices and incident handling. Qualifications - Typically 5+ years of progressive experience in security operations, IT operations, or systems administration, with a focus on hands-on Microsoft Security stack experience (Defender, Sentinel, Purview). - Strong operational security experience, including incident response, vulnerability management, and alert monitoring, with the ability to lead incidents end-to-end. - Experience with cloud security in Microsoft Azure and AWS, including onboarding, monitoring, and implementing controls within a SOC environment. - Proven experience in project-based security work, including the selection, onboarding, configuration, and rollout of new security tools and capabilities. - Comfortable working alongside managed SOC teams, IT teams, and business stakeholders to escalate incidents, improve workflows, and strengthen security posture. - Solid understanding of enterprise IT environments, including networking, identity systems, endpoints, and cloud infrastructure. - Hands-on experience with security tooling, such as SIEM, EDR/XDR, vulnerability scanners, identity security tools, and cloud security controls, including tuning and telemetry correlation. - Knowledge of security frameworks and compliance standards (ISO 27001, SOC 2, NIST) and applying them in operational security contexts. - Holds at least one recognized cybersecurity certification (e.g., Security+, Microsoft Security, AWS Security); CISSP is a plus. - Ability to analyze complex technical data, correlate signals across systems, and make sound risk-based decisions under pressure. - Strong verbal and written English communication skills. Company Description At Envision, we believe in creating life-changing outcomes through the work we do with our clients, giving back to our communities, while creating a company culture where our people thrive. We believe success starts with a workplace where everyone feels valued, supported, and empowered to grow. - Our Vision: To unleash the power of combined intelligence to accelerate patient access to life-changing treatments. - Our Mission: Delivering smarter and faster solutions to create, communicate, and commercialize value for our clients. - Our Values: Excellence, People, Growth.

Role Description Our customers don't just need a platform that tracks their GRC program. They need a trusted voice who can help them think through it. As a Senior GRC Analyst, you'll be the person customers turn to when a risk assessment gets complicated, an audit raises an unexpected question, or a policy needs to be adapted to their specific environment. This role goes beyond process execution and platform support. You'll bring real GRC judgment to every customer interaction, recognizing when a question is more complex than it looks, and guiding customers through it with the confidence of someone who has actually done this work before. What You'll Do - Serve as a hands-on GRC advisor for a portfolio of customers, guiding them through risk assessments, risk registers, audit preparation, and control rollouts. - Help customers prepare for and navigate audits (SOC 2, ISO 27001, HIPAA, PCI-DSS, NIST, and similar frameworks), translating requirements into practical next steps. - Advise on policy development and control design tailored to each customer's risk profile and maturity level — not just “what the framework says,” but what actually makes sense for them. - Spot GRC complexity early — recognizing when a customer's question touches on risk, compliance, or audit nuance that needs more than a standard playbook answer. - Partner closely with Support and Customer Success to own the escalations that require real GRC expertise, not just product knowledge. - Turn recurring customer questions into scalable guidance — playbooks, internal knowledge base content, and best-practice frameworks the whole team can use. - Act as the voice of the customer internally, flagging where our platform could better support real-world GRC workflows. Qualifications - 5+ years of experience as a GRC analyst, consultant, or coordinator — in-house, at a consulting firm, or in a similar capacity. - Direct, hands-on experience with audits, risk assessments and risk registers, and policy rollouts — you've been in the room, not just read about it. - Working familiarity with common frameworks (SOC 2, ISO 27001, HIPAA, PCI-DSS, NIST, or similar) — deep specialization isn't required, but you should be able to orient quickly in any of them. - An instinct for GRC complexity: you can tell when something is more nuanced than it first appears, and you know how to break it down for someone who's stuck. - Strong consultative communication skills — you can explain a compliance concept to a nontechnical stakeholder without losing the substance. - A genuine interest in helping customers solve problems, not just closing tickets. Requirements - Certifications such as CISA, CRISC, CGRC, or ISO 27001 Lead Implementer/Auditor. - Experience working directly with a GRC software platform (as a practitioner, implementer, or vendor-side consultant). - Exposure to multiple industries or company sizes, giving you a broader sense of how GRC programs vary in practice. Benefits - Competitive salary and meaningful equity participation at a Series A inflection point. - Comprehensive paid benefits, including health insurance, 401(k), and generous leave policies.

Role Description Client is in need of a resource with strong Active Directory, Entra ID, security Operations, Security provisioning engineering and PAM experience to join the team. This team is responsible for many different things to include stabilization and correction on going and persistent issues, automation, working from a queue and new projects. Should be great at working with a team, developing relationships and collaboration. Key Responsibilities - Support and administer Active Directory (AD) and Microsoft Entra ID environments. - Assist with identity provisioning, deprovisioning, and access management processes. - Support and maintain Privileged Access Management (PAM) solutions. - Develop and enhance automation scripts and workflows to reduce manual effort. - Troubleshoot and resolve identity, authentication, and access-related issues. - Participate in security operations activities, including incident investigations and vulnerability remediation efforts. - Support ongoing stabilization and remediation of recurring security and identity issues. - Work closely with team members on operational tasks, project work, and continuous improvement initiatives. - Identify opportunities to streamline processes and improve security controls. - Document procedures, solutions, and operational processes. Preferred Qualifications - Experience automating repetitive administrative or security-related tasks. - Exposure to Microsoft security and cloud technologies. - Basic understanding of security best practices and access controls. - Experience supporting enterprise-scale environments. Ideal Candidate The ideal candidate is someone who enjoys learning new technologies, improving inefficient processes, and using automation to solve problems. We're looking for a self-starter who: - Has a strong identity and security foundation. - Enjoys scripting and automation. - Thinks proactively about process improvements. - Works well within a collaborative team environment. - Can balance operational support work with engineering-focused initiatives. Top Required Skills - Active Directory (AD) - Microsoft Entra ID - Automation/Scripting (PowerShell, Python, etc.) - Privileged Access Management (PAM) Job Type & Location This is a Contract position based out of Madison, WI. Pay and Benefits The pay range for this position is $30.00 - $34.00/hr. Eligibility requirements apply to some benefits and may depend on your job classification and length of employment. Benefits are subject to change and may be subject to specific elections, plan, or program terms. If eligible, the benefits available for this temporary role may include the following: - Medical, dental & vision - Critical Illness, Accident, and Hospital - 401(k) Retirement Plan – Pre-tax and Roth post-tax contributions available - Life Insurance (Voluntary Life & AD&D for the employee and dependents) - Short and long-term disability - Health Spending Account (HSA) - Transportation benefits - Employee Assistance Program - Time Off/Leave (PTO, Vacation or Sick Leave) Workplace Type This is a fully remote position. Application Deadline This position is anticipated to close on Jul 21, 2026.

• Create innovative, thought provoking, and highly leveraged “must-have insights” content • Develop new insights and ideas through thought leadership • Develop in-depth analysis to identify root causes and drive strategy forward • Demonstrate thought leadership across a team of analysts • Research, analyze, and predict market trends • Provide actionable advice aligned to designated content area via interactions • Create and deliver high value presentation materials • Provide sales support to drive engagement with clients • Build credibility as an industry expert • Actively participate in innovation, ideation, and research discussions • Identify research process improvements or develop new processes • Be a mentor and coach for junior team members • Client-centric approach to engage clients regularly