Lead Security, Risk, and Compliance Specialist

Responsibilities:
- Support senior management in developing and executing the global cybersecurity strategy aligned to business, compliance, and manufacturing priorities
- Lead enterprise security governance, risk management, and compliance programs across multiple regions and regulatory environments
- Drive adoption of security frameworks such as NIST CSF, NIST AI RMF, and 21 CFR Part 11
- Oversee outsourced MDR SOC, threat intelligence, incident response, investigations, security architecture, and maintain regulatory/legal requirements
- Oversee advanced defense capabilities (zero trust, identity security, endpoint/OT protection)
- Ensure delivery of Identity and Access Management, Vulnerability Management, and Cloud Security programs
- Lead IT Risk Management program delivery (risk assessments, IT risk register, supplier security evaluations, penetration testing, audits)
- Partner with Legal, Privacy, Compliance, and IT to meet IT security and regulatory requirements
- Ensure AI risks are incorporated into IT risk management
- Embed security into product design and industrial control systems; operationalize security for manufacturing, R&D, IoT, and life sciences technologies
- Ensure secure IT/OT integration and protection of proprietary intellectual property
- Mentor and develop technical teams

Minimum Requirements:
- Bachelor’s degree in cybersecurity, computer science, or related field
- 8+ years progressive cybersecurity experience (leadership in biotech/pharmaceutical organizations)
- CISSP
- OT/ICS and manufacturing systems security experience
- Experience leading teams, managing crises, influencing executives
- Ability to operate in a high-throughput environment
- Familiarity with GxP (GMP, GCP, GLP) environments

Preferred Qualifications:
- CISM
- Strong knowledge of NIST, COSO, and other relevant frameworks