Location: Mexico or São Paulo, Brazil (Home-based)

Join IQVIA’s Global Information Security team to help protect a complex, global technology environment and the data assets that power our business. In this role, you will partner with IT and business stakeholders across regions, respond to security events, and strengthen enterprise safeguards through continuous improvement.

Job overview

The Cybersecurity Incident Response Analyst supports the secure operation of IQVIA’s global IT infrastructure by operating and maintaining security safeguards, investigating security events, and delivering forensics and investigation services. You will work closely with other Information Security team members, the CIO organization, and global/regional business teams, and you will collaborate with Legal, HR, and Privacy teams to support evidence handling and investigation processes.

Key responsibilities

Respond to alerted security events with expert analysis to support incident identification, response, resolution, and post-incident investigations.

Operate security controls and platforms including firewalls, endpoint detection and response (EDR), intrusion prevention, malware protection, data leakage prevention, vulnerability management, access control, and event monitoring.

Identify and analyze logs, artifacts, and evidence from multiple sources to validate, scope, and document incidents.

Secure and preserve evidence (physical and logical) using sound handling practices.

Coordinate with internal and external stakeholders to support global forensics and investigation processes.

Propose and implement improvements to technical safeguards (tools/technologies) and associated procedures and processes.

Develop and document operational procedures and metrics; produce management information reports to drive ongoing improvements.

Leverage vulnerability assessment and threat intelligence outputs to strengthen the security safeguards landscape.

Required experience & skills

Mandatory: Experience in Cybersecurity Incident Response, a Security Operations Center (SOC), or a related Information Security function.

Strong working knowledge of IT infrastructure and technologies (networks, databases, processing systems, web applications, mobile, cloud, big data, virtualization).

Working knowledge of cybersecurity principles, protocols, and technologies (encryption, authentication, access control, intrusion detection, attack patterns, network security).

Excellent communication across countries and cultures; strong collaboration and teamwork.

High attention to detail; ability to multitask, work independently, and drive change.

Proven discretion and ability to handle highly sensitive information with confidentiality.

Experience estimating/planning work effort and managing delivery risks and issues.

Commitment to continuous professional development.

Qualifications

Bachelor’s degree in Computer Science, Computer Engineering, or Information Technology.

English advanced proficiency

Minimum 5 years of related work experience.

Preferred certifications: EnCE; GIAC (GCFA, GCFE, GNFA); CISSP; CEH.

IQVIA is a leading global provider of clinical research services, commercial insights and healthcare intelligence to the life sciences and healthcare industries. We create intelligent connections to accelerate the development and commercialization of innovative medical treatments to help improve patient outcomes and population health worldwide. Learn more at https://jobs.iqvia.com

IQVIA is committed to integrity in our hiring process and maintains a zero tolerance policy for candidate fraud. All information and credentials submitted in your application must be truthful and complete. Any false statements, misrepresentations, or material omissions during the recruitment process will result in immediate disqualification of your application, or termination of employment if discovered later, in accordance with applicable law. We appreciate your honesty and professionalism.