Associate Director, Program Management, Cyber Risk

The Role

We are seeking an experienced, diligent, and driven Associate Director, Cybersecurity Technical Program Manager to join our dynamic team. Reporting directly to the Chief Information Security Officer (CISO), this role will serve as a key player responsible for leading cybersecurity initiatives building our 3rd Party Cybersecurity risk mitigation approach and practice. They will also serve as the primary liaison for external and internal cyber security audits. Working across Legal, Privacy, Procurement, and business stakeholders, they will drive corresponding cybersecurity reviews and play a key role establishing a cross-functional cybersecurity risk council. The ideal candidate will have a minimum of 8 years of professional experience, demonstrated technical program management skills along with a solid understanding of security compliance frameworks, maturity models, and audit attestation mechanisms.

Here’s What You’ll Do

• Develop, implement, and manage cybersecurity programs across the organization, ensuring alignment with business objectives.

• Conduct thorough 3P security reviews to ensure the safety and security of external software and business integrations that that may access Moderna’s infrastructure or handle confidential information.

• Establish a risk matrix and extensible tracking mechanisms to ensure 3P cyber risks are accurately communicated and surfaced to business leaders and stakeholders.

• Convene and lead a cross-functional cybersecurity council, driving the work and ensuring effective collaboration among team members.

• Collaborate with various stakeholders to identify, define, and prioritize cybersecurity risks and establish mitigation strategies for 3rd party relationships.

• Integrate process improvements and technology mechanisms to streamline the contract review process to account for cyber security risks and effective practices throughout the organization.

• Coordinate with cyber security incident response to drive to resolution potential emergent risks involving 3rd parties.

• Provide strategic direction and leadership in the development and implementation of cybersecurity solutions.

• Develop and deliver cybersecurity training and awareness programs to all employees related to the 3rd party and audit and cybersecurity requirements.

• Ensure compliance with relevant regulations, industry standards, and company policies.

• Additional duties as may be assigned from time to time

Here’s What You’ll Need (Minimum Qualifications)

• Minimum of 8 years of professional experience in cybersecurity, information technology, or a related field.

• Demonstrated experience in technical program management, preferably in a cybersecurity context with experience handling privacy and compliance audits and reviews.

• Experience conducting 3P product reviews and managing cross-functional teams or councils.

• Extensive experience working with healthcare, privacy, and cyber security frameworks and maturity models to align 3rd party business objectives with risk mitigation strategies

Here’s What You’ll Bring to the Table (Preferred Qualifications)

• Strong understanding of cybersecurity principles, IT systems, and related technologies.

• Excellent communication, leadership, and project management skills.

• Ability to work effectively with diverse teams and stakeholders at all levels.

• Certifications such as CISSP, CISM, or CISA are a plus.

• A desire to make an impact as part of a high-growth, transformational company that is Bold, Relentless, Curious, and Collaborative.

Under Washington State law, Moderna is required to provide a reasonable estimate of the salary range for the jobs covered by this description.  Base compensation for these positions in Washington State range from $158,000 to $284,500​. Actual salary determinations will take into account factors such as work location, prior education and experience, job-related knowledge, and demonstrated skills.  Compensation decisions are made on the facts and circumstances of each case.

In addition to base compensation Moderna employees are eligible for a comprehensive incentive compensation package including an annual cash bonus, new hire equity and an annual refresh, 401(k) match, competitive and inclusive medical, dental, and vision coverage options, flexible spending accounts for medical and dependent care, Life, LTD, and STD insurance, family leave offerings, including at least 18 weeks of 100% paid parental leave, lifestyle spending account, adoption, surrogacy, and family-planning benefits, generous paid time off, including:

•    Vacation, sick time, and observed Company-wide ho