About the position
Emergent BioSolutions is seeking a Vice President, Chief Information Security Officer (VP/CISO) to provide strategic and tactical leadership in global information security, disaster recovery, IT risk management, computer systems validation, and compliance programs for the enterprise. This role is pivotal in establishing and evolving the Information Security strategy and roadmaps to meet or exceed all regulatory agencies, government, client partnerships, and compliance mandates. The VP/CISO will utilize a standard risk-based framework to ensure consistent and repeatable practices across the organization. The successful candidate will drive the technology and architectural direction, implementing awareness programs that enable effective and lean delivery across business and IT organizations. This role aims to achieve cost optimization, quality improvement, and bottom-line results while protecting and enabling the business against the evolving security threat landscape. The VP/CISO will be a strong thought and people leader, possessing excellent communication skills to translate complex security concepts and risk topics to diverse levels within the organization. As a key liaison, the VP/CISO will collaborate with business stakeholders, executive-level technology risk areas, regulatory agencies, compliance partners, and the Board of Directors. The position requires setting the vision, strategy, and direction for comprehensive information security, disaster recovery, IT risk management, and compliance programs. The VP/CISO will also be responsible for developing and delivering a tiered security dashboard, leading the development of an enterprise information security awareness program, and ensuring compliance with industry and government regulations such as GDPR, HIPAA, and ISO 27001. Additionally, the VP/CISO will build, develop, and retain cybersecurity talent, support employees in their career development, and liaise with external agencies to maintain a strong security posture. The role includes monitoring the external threat environment, developing disaster recovery policies, and providing leadership for the IT Computer Systems Validation (CSV) team. The VP/CISO will also ensure fiscal stewardship in all areas of responsibility, contributing to the overall success of the organization.
Responsibilities
- Set the vision, strategy & direction for the development & implementation of comprehensive information security, disaster recovery, IT risk management & compliance programs.
- Own Board of Directors & Executive level communication and interaction, translating complex information security threats, risks & programs into achievable technology solutions.
- Develop and deliver a tiered security dashboard appropriate for each level of cybersecurity governance.
- Create & lead the development of an enterprise Information security awareness program to ensure compliance.
- Understand and translate the trade-offs required to manage different levels of risk tolerance and risk exposure across the organization.
- Lead team to implement security standards, procedures & guidelines for the enterprise and report security performance against established metrics.
- Ensure and monitor security compliance with industry and government rules and regulations (e.g., GDPR, HIPAA, ISO 27001, SEC).
- Build, develop and retain cybersecurity talent, supporting employees in their career development.
- Liaise with external agencies to ensure a strong security posture.
- Monitor the external threat environment for emerging threats and advise relevant stakeholders.
- Develop and oversee effective disaster recovery policies and standards.
- Set the vision, strategy, and direction for the organization incident response management program.
- Provide leadership of the IT Computer Systems Validation (CSV) team responsibilities.
Requirements
- Bachelor's degree in IT, business, or related discipline required; Master's degree in Business Administration or related field preferred.
- Minimum of 15+ years of experience in Information Security.
- Minimum of 5+ years of experience as Chief Information Security Officer (CISO).
- Minimum of 7 - 10 years of experience within the pharmaceutical industry, preferably within pharmaceutical manufacturing facility operations.
- Technical understanding of applications, networks, and databases; understanding of Cloud technologies (e.g. SaaS, PaaS, IaaS).
- Experience in the Defense industry preferred.
- Industry recognized certifications in information security and risk management fields.
- Deep understanding of CSV guidelines issued by regulatory agencies including FDA and MHRA and standards such as GAMP5.
- Excellent skills at building and managing relationships at all levels with a demonstrated ability to manage cross-functional teams.
- Visionary leader with strong business acumen and detailed knowledge of information security technologies, practices, policies, and their application.
- Great communicator in both written and oral communication.
Nice-to-haves
- Experience in the Defense industry preferred.
Benefits
- Competitive salaries
- Flexible work arrangements
- Extensive benefits package
- Supportive culture
- Diverse career opportunities
