Senior Director, Cyber Security

This is a fully remote position, open to applicants in Alabama, +23 more states.

📋 Description

• Drive the organization-wide cybersecurity strategy while enhancing security operations.

• Safeguard Clarivate’s systems, products, data, and clients, particularly in regulated healthcare and life sciences sectors.

• Facilitate customer assurance, audits, and regulatory assessments.

• Formulate and implement a cybersecurity strategy, roadmap, and operational model aimed at minimizing enterprise risk.

• Manage initiatives across security operations, incident response, vulnerability management, security engineering, governance, risk, and compliance.

• Collaborate with Technology, Product, Engineering, Privacy, Legal, Compliance, Procurement, and business leaders to integrate security requirements.

• Supervise monitoring, escalation, investigation, and response activities related to security incidents.

• Enhance security controls, policies, standards, procedures, dashboards, metrics, and reporting mechanisms.

• Assess cyber threats, pinpoint security vulnerabilities, and prioritize remediation efforts.

• Assist with audits, certifications, customer assurances, and regulatory obligations.

• Build and lead a high-performing cybersecurity team through effective resource planning, capability development, coaching, and prioritization of tasks.

• Present cyber risk, program performance, incident trends, and strategic recommendations to executive and senior leadership.

⛳️ Requirements

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field, or equivalent relevant experience.

• Over 12 years of experience in cybersecurity, particularly within healthcare, life sciences, or other highly regulated sectors.

• More than 5 years of experience leading cybersecurity teams, programs, or cross-functional security projects.

• Knowledge of GxP, FDA regulations, 21 CFR Part 11, HIPAA, computerized system validation, and principles of data integrity.

• Proven experience in defining and executing enterprise cybersecurity strategies, roadmaps, controls, and operational models.

• Experience overseeing security operations, incident response, vulnerability management, threat monitoring, security engineering, or cyber risk management.

• Familiarity with ISO 27001, SOC 2, NIST, CIS Controls, or comparable frameworks.

• Ability to translate cyber risk, security metrics, and technical concepts into actionable recommendations for senior leadership and business stakeholders.

• Relevant security certifications such as CISSP, CISM, CISA, CRISC, or CCSP, or equivalent experience.

• Experience in a global, matrixed organization with complex technological environments and regulated customer requirements.

• Proficiency in cloud security across AWS, Azure, GCP, or hybrid cloud platforms.

• Experience with SIEM, EDR/XDR, IAM, DLP, vulnerability management, third-party risk, or other enterprise security technologies.

• Background in supporting secure software development, product security, customer security assurance, or security-by-design initiatives.

• Experience in leading incident readiness, tabletop exercises, penetration testing, red team/blue team activities, or post-incident improvement programs.

• Willingness to work outside standard business hours for urgent incidents, escalations, or critical business events.

🏝️ Benefits

• Eligibility for incentive or bonus earnings.

• Flexibility to collaborate across global time zones.

• Full-time core business hours aligned with the employee’s time zone.

• Equal employment opportunity and non-discrimination protections.