Information Security Operations Analyst

<div class="content-intro"><p><span style="font-family: arial, helvetica, sans-serif; font-size: 10pt;">Legend Biotech is a global biotechnology company dedicated to treating and, one day, curing life-threatening diseases. Headquartered in Bridgewater, New Jersey, we are advancing the next generation of cell therapy through a portfolio of innovative technologies, including autologous, allogeneic, and in vivo cell therapy approaches. Our research spans chimeric antigen receptor T-cell (CAR-T), T-cell receptor (TCR-T), natural killer (NK) cell-based therapies, and other emerging platforms designed to transform the treatment of serious diseases. From our global network of research and development sites, we are committed to discovering and developing safe, effective, and cutting-edge therapies for patients worldwide.</span></p> <p><span style="font-family: arial, helvetica, sans-serif; font-size: 10pt;">Legend Biotech entered into a global collaboration agreement with Johnson & Johnson to jointly develop and commercialize CARVYKTI® (ciltacabtagene autoleucel; cilta-cel). Through this strategic partnership, we combine complementary expertise and capabilities to advance innovative immunotherapies for patients living with multiple myeloma.</span></p></div><p><span style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Legend Biotech is seeking an <strong>Information Security Operations Analyst</strong> as part of the <strong>Information Technology</strong> team based in <strong>Somerset, NJ. </strong></span></p> <p><span style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"><strong>Role Overview</strong></span></p> <p><span style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">The Information Security Operations Analyst is a key member of the Information Security Office, responsible for operating, tuning, and monitoring the company’s security technology stack. The Analyst detects, triages, contains, and reports on security events; manages vulnerability, email, endpoint, network, and identity security controls; delivers the phishing simulation and awareness program; and produces operational security metrics in alignment with security frameworks and regulatory requirements.</span></p> <p><span style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"><strong>Key Responsibilities</strong></span></p> <ul> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"><span style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"><strong>Security monitoring & response:</strong> Monitor SIEM and alerting platforms; triage, investigate, and escalate alerts; support incident investigations, root cause analysis, and incident reporting.</span></li> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"><span style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"><strong>Detection tuning & platform health: </strong>Tune detection rules, risk scoring, and log sources; maintain collectors, integrations, certificates, and upgrades with vendors and Infrastructure.</span></li> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"><span style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"><strong>Vulnerability management: </strong>Run on-demand and scheduled scans for new servers, software, and changes; report results and track remediation with asset owners.</span></li> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"><span style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"><strong>Email security: </strong>Administer the secure email gateway, including quarantine, sender and policy rules, threat alert triage, and email DLP tuning.</span></li> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"><span style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"><strong>Identity threat response: </strong>Investigate risky sign-ins and suspicious MFA/device registrations; perform containment (session revocation, MFA reset, device removal).</span></li> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"><span style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"><strong>Endpoint, network & cloud security:</strong> Support EDR/XDR, MDM/UEM, secure web gateway, and ZTNA operations, including compliance reviews and policy rollouts.</span></li> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"><span style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"><strong>Security awareness: </strong>Design, run, and report on phishing simulations; align content with awareness events and support end-user training.</span></li> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"><span style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"><strong>Access & third-party risk:</strong> Remove privileged and security-tool access during offboarding; identify unapproved software and route requests through TPRM.</span></li> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"><span style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"><strong>Documentation & reporting: </strong>Maintain SOPs, KB articles, runbooks, monthly operations reports, and leadership metrics.</span></li> <li style="font-family: arial, helvetica, sans-