Information Security Director

ulliInternational Environment /liliHands-on and Security Governance /li /ulh3About Our Client /h3pOur client is an innovative and fast-growing biopharmaceutical company focused on developing transformational therapies for patients with ophthalmic and neuro-ophthalmic diseases. Operating internationally in a highly regulated industry, the organization leverages a modern, cloud-first technology environment and is committed to investing in cybersecurity, digital transformation, and operational excellence to support its long-term growth ambitions. /ph3Job Description /h3pOur client is seeking an experienced and hands-on cybersecurity leader to define, implement, and continuously enhance its enterprise security program. Reporting to the VP of IT, this role combines strategic leadership with operational execution across cybersecurity governance, risk management, cloud security, identity management, compliance, and incident response. The successful candidate will play a critical role in protecting the organization's digital assets, supporting business growth, and ensuring a robust security posture within a highly regulated environment. /pulliDevelop, implement, and continuously enhance the company's cybersecurity strategy, ensuring alignment with business objectives, regulatory requirements, and industry best practices. /liliLead cybersecurity governance, risk management, and compliance programs, including policy development, risk assessments, internal controls, and audit readiness. /liliOwn the security architecture across cloud, infrastructure, applications, endpoints, and collaboration platforms, with a strong focus on Microsoft 365 and Entra ID environments. /liliOversee identity and access management (IAM) processes, ensuring secure user provisioning, privileged access controls, and authentication standards. /liliDirect security operations, including threat detection, vulnerability management, incident response, and remediation activities in collaboration with internal and external partners. /liliManage cybersecurity third-party service providers, including MSSPs, security consultants, penetration testing firms, and technology vendors. /liliLead business continuity, disaster recovery, and cyber resilience initiatives to ensure operational preparedness and rapid recovery capabilities. /liliEstablish and monitor cybersecurity KPIs and metrics, providing regular executive-level reporting and recommendations to leadership. /liliDrive data protection, privacy, and information security initiatives, ensuring appropriate safeguards for critical business and research data. /liliEvaluate emerging technologies, including AI-related risks and controls, to ensure secure adoption and governance. /liliPromote a strong cybersecurity culture through awareness programs, employee education, and stakeholder engagement across the organization. /li /ulh3The Successful Applicant /h3ulliBachelor's or master's degree in information security, Computer Science, Information Technology, Engineering, or a related field. /liliMinimum 10 years of progressive experience in cybersecurity and IT, including at least 3-5 years in a leadership or management role. /liliProven track record of developing and executing enterprise cybersecurity programs within complex and highly regulated environments. /liliStrong expertise in cybersecurity governance, risk management, security operations, incident response, and vulnerability management. /liliHands-on experience securing Microsoft 365, Entra ID, Azure, endpoint protection platforms, and cloud-based infrastructures. /liliDeep understanding of identity and access management, 0-trust principles, network security, and modern cybersecurity architectures. /liliExperience leading security audits, regulatory assessments, and compliance initiatives aligned with frameworks such as ISO 27001, NIST CSF, SOC 2, or similar standards. /liliPrevious experience in pharmaceutical, biotechnology, healthcare, medical device, or other regulated industries is highly desirable. /liliDemonstrated ability to communicate technical and cyber risk topics to executive leadership, board members, and non-technical stakeholders. /liliStrong project management and vendor management capabilities, with experience leading cross-functional initiatives. /liliRelevant professional certifications such as CISSP, CISM, CCSP, CRISC, or Microsoft Security certifications are highly valued. /liliExcellent leadership, communication, problem-solving, and stakeholder management skills, with the ability to influence decision-making across all levels of the organization. /li /ulh3What's on Offer /h3ulliAttractive package and environment /liliFlexibility with 2 days of Home Office per week /liliA unique opportunity to build, lead, and shape a growing cybersecurity function within an innovative and international organization. /liliOwnership of high-impact cybersecurity, compliance, and digital transformation initiatives. /liliA collaborative and dynamic work environment that values innovation, continuous improvement, and professional development. /liliExposure to cutting-edge technologies, cloud environments, and evolving cybersecurity challenges. /liliCompetitive compensation package, comprehensive benefits, and attractive long-term career growth opportunities. /li /ulpbQuote job ref: JN- /b /p #J-18808-Ljbffr