Information Security Director

• International Environment
• Hands-on and Security Governance
• About Our Client

Our client is an innovative and fast-growing biopharmaceutical company focused on developing transformational therapies for patients with ophthalmic and neuro-ophthalmic diseases.

Operating internationally in a highly regulated industry, the organization leverages a modern, cloud-first technology environment and is committed to investing in cybersecurity, digital transformation, and operational excellence to support its long-term growth ambitions.

Job Description

Our client is seeking an experienced and hands-on cybersecurity leader to define, implement, and continuously enhance its enterprise security program.

Reporting to the VP of IT, this role combines strategic leadership with operational execution across cybersecurity governance, risk management, cloud security, identity management, compliance, and incident response.

The successful candidate will play a critical role in protecting the organization's digital assets, supporting business growth, and ensuring a robust security posture within a highly regulated environment.

• Develop, implement, and continuously enhance the company's cybersecurity strategy, ensuring alignment with business objectives, regulatory requirements, and industry best practices.
• Lead cybersecurity governance, risk management, and compliance programs, including policy development, risk assessments, internal controls, and audit readiness.
• Own the security architecture across cloud, infrastructure, applications, endpoints, and collaboration platforms, with a strong focus on Microsoft 365 and Entra ID environments.
• Oversee identity and access management (IAM) processes, ensuring secure user provisioning, privileged access controls, and authentication standards.
• Direct security operations, including threat detection, vulnerability management, incident response, and remediation activities in collaboration with internal and external partners.
• Manage cybersecurity third-party service providers, including MSSPs, security consultants, penetration testing firms, and technology vendors.
• Lead business continuity, disaster recovery, and cyber resilience initiatives to ensure operational preparedness and rapid recovery capabilities.
• Establish and monitor cybersecurity KPIs and metrics, providing regular executive-level reporting and recommendations to leadership.
• Drive data protection, privacy, and information security initiatives, ensuring appropriate safeguards for critical business and research data.
• Evaluate emerging technologies, including AI-related risks and controls, to ensure secure adoption and governance.
• Promote a strong cybersecurity culture through awareness programs, employee education, and stakeholder engagement across the organization.
• The Successful Applicant
• Bachelor's or master's degree in information security, Computer Science, Information Technology, Engineering, or a related field.
• Minimum 10 years of progressive experience in cybersecurity and IT, including at least 3-5 years in a leadership or management role.
• Proven track record of developing and executing enterprise cybersecurity programs within complex and highly regulated environments.
• Strong expertise in cybersecurity governance, risk management, security operations, incident response, and vulnerability management.
• Hands-on experience securing Microsoft 365, Entra ID, Azure, endpoint protection platforms, and cloud-based infrastructures.
• Deep understanding of identity and access management, 0-trust principles, network security, and modern cybersecurity architectures.
• Experience leading security audits, regulatory assessments, and compliance initiatives aligned with frameworks such as ISO 27001, NIST CSF, SOC 2, or similar standards.
• Previous experience in pharmaceutical, biotechnology, healthcare, medical device, or other regulated industries is highly desirable.
• Demonstrated ability to communicate technical and cyber risk topics to executive leadership, board members, and non-technical stakeholders.
• Strong project management and vendor management capabilities, with experience leading cross-functional initiatives.
• Relevant professional certifications such as CISSP, CISM, CCSP, CRISC, or Microsoft Security certifications are highly valued.
• Excellent leadership, communication, problem-solving, and stakeholder management skills, with the ability to influence decision-making across all levels of the organization.
• What's on Offer
• Attractive package and environment
• Flexibility with 2 days of Home Office per week
• A unique opportunity to build, lead, and shape a growing cybersecurity function within an innovative and international organization.
• Ownership of high-impact cybersecurity, compliance, and digital transformation initiatives.
• A collaborative and dynamic work environment that values innovation, continuous improvement, and professional development.
• Exposure to cutting-edge technologies, cloud environments, and evolving cybersecurity challenges.
• Competitive compensation package, comprehensive benefits, and attractive long-term career growth opportunities.