Sr. Director, Governance, Risk & Compliance
Alnylam Pharmaceuticals
August 29, 2026
Remote friendly (Cambridge, MA)
United States
Corporate Functions
Responsibilities:
- Lead and evolve Alnylam’s enterprise GRC program.
- Define and execute a multi-year cyber risk and compliance maturity roadmap aligned to NIST CSF v2.0, ERM, regulatory requirements, and business priorities.
- Own the cyber risk management lifecycle (risk identification, assessment, prioritization, treatment, executive reporting).
- Establish and maintain security governance frameworks, policies, standards, and exception management.
- Provide cybersecurity governance and risk oversight for GxP-regulated systems, aligning with data integrity, validation expectations, IT SDLC practices, and quality requirements.
- Ensure security policies/standards account for validated system constraints, change control, and inspection readiness.
- Oversee compliance activities for HIPAA, SOX, FDA-adjacent biotech regulations, CSV, privacy requirements, and emerging regulations (e.g., NIS2).
- Lead internal/external audits, inspections, and assurance; manage findings and remediation plans.
- Own and mature third-party risk management (TPRM).
- Embed cybersecurity risk into system lifecycle and validation.
- Define and track risk-based metrics and KRIs focused on outcomes, maturity, and remediation effectiveness.
- Build and lead a high-performing GRC organization; deliver executive/board-level reporting.
Qualifications:
- Bachelor’s degree in a relevant field; advanced degree (MBA, Master’s, JD) preferred.
- 15+ years progressive experience in cybersecurity, risk management, compliance, or audit.
- 10+ years leadership experience building/leading GRC, risk, or compliance teams.
- Deep knowledge of NIST CSF, NIST 800-53, ISO 27001, and ERM frameworks.
- Experience in regulated environments (biotech/pharma/healthcare/life sciences).
- Strong ability to translate complex risk for executive/board audiences.
- CISSP/CISM/CRISC/CISA strongly preferred.
Compensation/Benefits:
- U.S. Pay Range: $229,500.00–$310,500.00.
- Eligible for annual short-term incentive and annual long-term incentive.
Location:
- Hybrid role, primarily based in Cambridge, MA office.
- Lead and evolve Alnylam’s enterprise GRC program.
- Define and execute a multi-year cyber risk and compliance maturity roadmap aligned to NIST CSF v2.0, ERM, regulatory requirements, and business priorities.
- Own the cyber risk management lifecycle (risk identification, assessment, prioritization, treatment, executive reporting).
- Establish and maintain security governance frameworks, policies, standards, and exception management.
- Provide cybersecurity governance and risk oversight for GxP-regulated systems, aligning with data integrity, validation expectations, IT SDLC practices, and quality requirements.
- Ensure security policies/standards account for validated system constraints, change control, and inspection readiness.
- Oversee compliance activities for HIPAA, SOX, FDA-adjacent biotech regulations, CSV, privacy requirements, and emerging regulations (e.g., NIS2).
- Lead internal/external audits, inspections, and assurance; manage findings and remediation plans.
- Own and mature third-party risk management (TPRM).
- Embed cybersecurity risk into system lifecycle and validation.
- Define and track risk-based metrics and KRIs focused on outcomes, maturity, and remediation effectiveness.
- Build and lead a high-performing GRC organization; deliver executive/board-level reporting.
Qualifications:
- Bachelor’s degree in a relevant field; advanced degree (MBA, Master’s, JD) preferred.
- 15+ years progressive experience in cybersecurity, risk management, compliance, or audit.
- 10+ years leadership experience building/leading GRC, risk, or compliance teams.
- Deep knowledge of NIST CSF, NIST 800-53, ISO 27001, and ERM frameworks.
- Experience in regulated environments (biotech/pharma/healthcare/life sciences).
- Strong ability to translate complex risk for executive/board audiences.
- CISSP/CISM/CRISC/CISA strongly preferred.
Compensation/Benefits:
- U.S. Pay Range: $229,500.00–$310,500.00.
- Eligible for annual short-term incentive and annual long-term incentive.
Location:
- Hybrid role, primarily based in Cambridge, MA office.