At Chain IQ, your ideas move fast.Chain IQ is a global AI-driven Procurement Service Partner, headquartered in Baar, Switzerland, with operations across main centers and 16 offices worldwide. We provide tailored, end-to-end procurement solutions that enable transformation, drive scalability, and deliver substantial reductions in our clients' indirect spend. Our culture is built on innovation, entrepreneurship, ownership, and impact. Here, your voice matters - bold thinking is encouraged, and action follows ambition.Join our TeamIt is an exciting time at Chain IQ and our team in Bucharest are looking for a Senior IT Risk and Security Analyst.Chain IQ generate value far beyond cost reduction. We transform our client’s indirect procurement towards a world-class, resilient, ethical and digitalized end-to-end function. We promote a culture of collaboration and shared excellence while encouraging an open and honest exchange of ideas. We offer the potential for significant corporate growth and career development.Our ambition is to strengthen the existing highly experienced team to provide the best in industry support to our growing client base.Role PurposeThe primary purpose is to deliver value-add sourcing services to clients in a structured, professional and consistent manner.The role will monitor, detect, analyze, and respond to cybersecurity threats and incidents, ensuring the protection of organizational assets, data, and systems.Additionally, you will contribute to the continuous evolution of Security Operations by enhancing detection capabilities, supporting automation, and strengthening alignment with enterprise risk, compliance (e.g., SOC2, ISO27001), and incident response frameworks within a Three Lines of Defense (3LoD) model.ResponsibilitiesWe are currently seeking a Senior Level Analyst to join the IT Risk and Security team.The role requires a dynamic, highly client-focused individual with proven experience within IT Security field.Main Responsibilities Will Include:We are currently seeking a Security Analyst (Senior-Level) to join the Cyber Security Operations Team (1st Line of Defense). The Security Analyst needs to be a dynamic, highly client-focused individual with proven experience within Security Operations, Threat Detection, and Incident Response.Main Responsibilities Will Include:Monitor and analyze security alerts across enterprise platforms (SIEM, EDR, identity, cloud, and AI-driven security tools)Perform advanced triage and investigation of security incidents, including phishing, endpoint threats, identity compromise, and cloud-based attacksSupport detection and response capabilities related to AI platforms, Copilot-type services, and agentic systems, including misuse, data leakage, and abnormal behavior patternsLead or support incident response activities, ensuring effective containment, eradication, and recoveryConduct root cause analysis and contribute to post-incident reviews to strengthen controls and processesCorrelate signals across endpoint, identity, email, cloud, and AI interaction layers to identify complex and multi-stage attack patternsDevelop and tune detection rules and use cases, including those related to AI usage, prompt injection risks, and data exposure scenariosSupport threat hunting activities, including emerging threats targeting cloud and AI-enabled environmentsCollaborate with IT, cloud, data, and AI platform teams to securely enable new technologies and reduce risk exposureContribute to SOC transformation initiatives, including automation, orchestration, and AI-assisted security operationsMaintain high-quality documentation and audit-ready evidence aligned with SOC2 and internal control expectationsSupport control assurance activities and ensure alignment with 2nd Line governance and AI risk frameworksAct as an escalation point for junior analysts and contribute to knowledge sharing within the teamRequirements3–5 years of experience in cybersecurity, with a focus on security operations, threat detection, or incident responseStrong hands-on experience with SIEM,EDR and SOAR tools (e.g., Microsoft Sentinel, Defender, CrowdStrike)Solid understanding of enterprise attack techniques, threat vectors, and MITRE ATT&CK frameworkExperience with Microsoft security ecosystem (Defender suite, Entra ID, Purview) is highly desirableUnderstanding of cloud security principles (Azure preferred) and modern endpoint security architecturesFoundational understanding of AI security risks, including data leakage, misuse of AI tools, and prompt-based threats (practical exposure preferred)Experience working in controlled or regulated environments (SOC2, ISO27001) with audit and evidence expectationsAbility to independently manage and prioritize multiple incidents in a fast-paced environmentStrong analytical mindset with attention to detail and structured problem-solving approachEffective communication skills, with the ability to translate technical findings into business-relevant insightsJoin a truly global team.We offer a dynamic and international environment where high performance meets real purpose. We're proud to be Great Place to Work-certified and even prouder of the people who make that possible. Let’s shape the future of procurement - together.Chain IQ – Create. Lead. Make an impact.Information for agencies: Applications sent or uploaded by placement agencies or similar are not desired, will therefore not be considered and will be deleted. Show more Show less