Director, Infrastructure and Cybersecurity

Company Overview:

Prime Medicine is a leading biotechnology company dedicated to creating and delivering the next generation of gene editing therapies to patients. The Company is leveraging its proprietary Prime Editing platform, a versatile, precise and efficient gene editing technology, to develop a new class of differentiated, one-time, potentially curative genetic therapies. Designed to make only the right edit at the right position within a gene while minimizing unwanted DNA modifications, Prime Editors have the potential to repair almost all types of genetic mutations and work in many different tissues, organs and cell types.  

Prime Medicine is currently progressing a diversified portfolio of eighteen programs initially focused on genetic diseases with a fast, direct path to treating patients or with a high unmet need because they cannot be treated using other gene-editing approaches. Over time, the Company intends to maximize Prime Editing’s therapeutic potential and advance potentially curative therapeutic options to patients for a broad spectrum of diseases. For more information, please visit www.primemedicine.com.

Position Overview:

 The Associate Director/Director of Infrastructure and Cybersecurity is a critical part of the Digital leadership team and will report directly to the VP of IT and Facilities. They will be key to enabling and maintaining scalable, secure infrastructure and ongoing cyber-resilience. The incumbent will lead all aspects of infrastructure and cybersecurity and large-scale infrastructure buildouts. In addition, they will collaborate with Informatics to architect, evaluate, and integrate technologies that support Prime's data strategy, including the implementation of an R&D data lake house. They will own the overall design and engineering of infrastructure platforms that deliver high availability, performance, capacity, in a cost effective and secure manner. The Associate Director/Director of Infrastructure will also be responsible for the administration, implementation, and oversight of the IT Information Security and Data Protection strategies for the organization to align with relevant laws, regulations, and industry standards. 

Key Responsibilities:

• Heads core infrastructure services and Cybersecurity with the goal of building a hybrid team of internals and externals and key processes. 
• Leads the effective delivery and operations of core infrastructure Services including Compute, Storage, AWS, Network, and other related services in the Enterprise Technology stack. 
• Creates and drives repeatable processes and system optimizations, which can be consistently applied. Oversees the operational health, management, security, lifecycle, and reliability of hybrid core infrastructure services. 
• Supports and ensures compliance of IT Governance for controls, standards, and practices. 
• Accountable for managing vendors, ensuring they deliver quality services and meet all contractual obligations.  
• Manage Infrastructure budgets and purchasing to meet accounting and control requirements including vendor management, inventory tracking and billing of materials, software, and services. 
• Plan and direct the design, deployment, and implementation of on premise and cloud technology infrastructure, including network administration, device management, system architecture, telecommunications, and business continuity and disaster recovery to support Prime’s environment.
• Provide leadership for planning, developing, maintaining and improving assigned programs/services, including management and coordination of personnel, budget management, and vendor relationships.
• Provides ongoing analysis of company technology needs by establishing feasibility studies, systems design, and implementation plan to ensure a highly available IT infrastructure.
• Works with all business functions to understand the security risks and compliance requirements, develops a long-term corporate strategy for these areas. 
• Leads and executes on IT Risk & Compliance roadmap, to include aligning with the defined Information Security strategy, business, and product strategy. 
• Lead IT security incident response, performing triage and determining if security incidents require escalation and/or further response. 
• Develop and maintain Information security & Data Protection operational processes, policies and procedures and Data Classification standards.  
• Implement cybersecurity best practices using relevant security frameworks, such as ISO 27001, NIST, SANS Critical 20, COBIT, etc. 
• Implement controls and tools necessary for compliance with GXP and Sarbanes-Oxley. 
• Maintain and enhance exi