Cyber Security Lead

Position Title: Lead - Cyber Security & Compliance

Function: IT

Location: Corporate Office

Role Purpose

The purpose of a Cybersecurity Lead role is to provide strategic direction, leadership, and oversight for organization's information security and risk management programs. This ensures the protection of sensitive data, systems, and operations from cyber threats, while maintaining compliance with regulatory requirements.

Key Responsibilities

Strategic Leadership and Governance

• Develop and implement a comprehensive cybersecurity strategy aligned with business objectives.
• Establish and enforce security policies, standards, and procedures.
• Lead the organization's cybersecurity governance program, ensuring accountability and ownership at all levels.
• Act as a trusted advisor to the executive team and board on cybersecurity matters.
• Establish security governance frameworks tailored to the pharmaceutical sector, ensuring adherence to industry-specific regulations like FDA CFR Part 11, GDPR, and HIPAA.

Risk Management and Compliance

• Conduct regular risk assessments to identify, analyze, and mitigate cybersecurity risks.
• Oversee compliance with relevant regulations, standards, and frameworks.
• Monitor and ensure the organization's cybersecurity posture aligns with industry best practices.
• Implement security measures for connected manufacturing systems (e.g., SCADA, IoT, and Industry 4.0 technologies) to prevent disruptions or sabotage.

Threat Detection and Incident Response

• Develop and oversee a threat intelligence and monitoring program to proactively identify vulnerabilities.
• Establish and lead an incident response framework, including preparation, detection, containment, eradication, recovery, and post-incident analysis.
• Manage and oversee third-party security assessments and penetration testing.
• Collaborate with R&D teams to embed security controls within research systems and databases.
• Monitor for threats targeting IP theft and ensure robust measures against industrial cyber threats.

Security Operations

• Supervise the deployment, management, and maintenance of security tools and technologies, including firewalls, intrusion detection systems, endpoint protection, and encryption.
• Collaborate with IT teams to ensure security is embedded in system architecture, software development, and infrastructure management.
• Ensure timely updates and patches for systems to address vulnerabilities.
• Identify and manage internal/outsourced Security Operation Center.

Awareness and Training

• Develop and implement cybersecurity awareness programs to educate employees on security best practices.
• Promote a culture of security across the organization to minimize insider threats and human-error vulnerabilities.
• Lead tabletop exercises and simulations to test the readiness of teams for cyber incidents.

Continuous Improvement and Innovation

• Stay abreast of emerging cyber threats, trends, and technologies.
• Drive innovation in cybersecurity solutions and processes to maintain resilience against evolving threats.

Supervisory/Management Responsibilities

• Build and lead a high-performing cybersecurity team.
• Collaborate with internal stakeholders, including IT, legal, compliance, and HR, to ensure a unified approach to security.
• Participate in industry forums and collaborate with peers to benchmark and share best practices.
• Establish clear goals, performance metrics, and development plans for team members.

Qualification and Experience

• Bachelors degree in computer science, Information Technology, Cybersecurity, or a related field.
• 15+ years of experience in IT Security, with at least 5 years in leadership positions in any of the Pharma company or clients.
• Strong knowledge of GxP compliance, data integrity, and regulatory requirements.
• Professional certifications, such as are added advantage.
• Certified Information Systems Security Professional (CISSP)
• Certified Information Security Manager (CISM)
• Certified Ethical Hacker (CEH)
• ISO 27001 Lead Implementer/Lead Auditor