Director of Cybersecurity

Company context

Role mission

Key responsibilities

• Lead enterprise cybersecurity strategy, governance, and a multi-year roadmap aligned with transformation objectives and regulated pharmaceutical needs.
• Own cyber risk management and align with GxP, GDPR and equivalent privacy rules, and relevant industry practices, including ISO 27001, NIS2, and NIST.
• Partner with Quality (CSV) on validated systems, security controls, and audit readiness.
• Embed Security by Design across products, platforms, cloud, enterprise applications, and data ecosystems.
• Oversee security operations, resilience, vulnerability management, incident response, and crisis management; lead major incidents through containment and root cause resolution.
• Strengthen identity and access management and data protection; drive least privilege, identity federation, and zero trust where appropriate.
• Promote security awareness and shared accountability across the organization.
• Build and lead an internal and external cybersecurity team; advise executives, stakeholders, vendors, regulators, and auditors.

Experience and profile

• 12–15+ years of experience in cybersecurity and IT risk.
• Proven senior leadership experience, such as Director of Cybersecurity, Head of Security, or CISO.
• Experience in complex regulated environments such as pharma, healthcare, manufacturing, or similar.
• Track record building or transforming security functions, managing enterprise risk programs, and securing cloud and modern architectures.
• Exposure to GxP environments and validation constraints (CSV) is appreciated.
• Experience in digital or cloud transformation organizations, familiarity with ERP and industrial systems, and a background in both security strategy and operations are appreciated.