Exec. Director, Cybersecurity

COMPANY:

At BioCryst, we share a deep commitment to improving the lives of people living with complement-mediated and other rare diseases. For over three decades we’ve been guided by our passion for not settling for “ordinary” in our quest to develop novel medicines. We leverage our expertise in structure-guided drug design to develop first-in-class or best-in-class oral small-molecule and protein therapeutics, led by the efforts of our team of expert scientists in our Discovery Center of Excellence in Birmingham, Alabama. Our global headquarters is in Durham, North Carolina, our European headquarters is in Dublin, Ireland and our employees span the globe across sites in multiple countries. We are proud of our culture of engagement and accountability that rewards people for innovative thinking and achievement of key objectives. For more information, please visit our website at www.biocryst.com or follow us on LinkedIn and Instagram.

 

JOB SUMMARY:

The Executive Director of Cybersecurity is a senior leadership role responsible for defining and executing a global cybersecurity and IT risk management strategy across a publicly traded biotech/pharmaceutical enterprise. This role ensures the protection of sensitive data, intellectual property, and critical infrastructure while maintaining compliance with global regulatory frameworks (e.g., FDA, EMA, HIPAA, GDPR, SOX). The role reports directly to the SVP of Information Technology and serves as the organization’s top cybersecurity authority. #LI-REMOTE

 

ESSENTIAL DUTIES & RESPONSIBILITIES:

Cybersecurity Strategy & Leadership

• Define and lead the global cybersecurity vision, roadmap, and investment strategy.
• Align security initiatives with enterprise risk appetite, business goals, and regulatory obligations.
• Serve as the executive voice on cybersecurity to the board, audit committee, and external stakeholders.

Executive Presence & Communication

• Present cybersecurity posture, risk assessments, and incident updates to executive leadership and the board of directors.
• Translate complex technical risks into clear, actionable business insights.
• Build trust and credibility with senior stakeholders across R&D, clinical, commercial, and manufacturing functions.

Security Metrics & Reporting

• Establish, maintain, and continuously refine a comprehensive set of cybersecurity and IT risk metrics.
• Develop dashboards and reporting mechanisms to track performance, maturity, and risk exposure.
• Regularly report metrics to executive leadership and the board to support strategic decision-making and regulatory compliance.

IT Risk Management & Governance

• Oversee enterprise-wide IT risk assessments, threat modeling, and mitigation strategies.
• Establish and maintain a risk governance framework that integrates with enterprise risk management (ERM).
• Lead incident response and crisis management planning for cyber events and IT disruptions.

Regulatory Compliance & Audit Readiness

• Ensure compliance with global regulations and standards including SOX, HIPAA, GDPR, NIST, ISO 27001, and GxP.
• Partner with Legal, Compliance, and Internal Audit to manage security audits and regulatory inspections.

Security Architecture & Operations

• Direct the design and implementation of secure infrastructure, applications, and data protection frameworks.
• Oversee security operations, including threat detection, vulnerability management, and endpoint protection.

Talent Development & Leadership

• Foster a culture of security awareness and continuous improvement across the organization.

Innovation & Emerging Threats

• Monitor the evolving threat landscape, including AI-driven threats, supply chain vulnerabilities, and geopolitical risks.
• Drive adoption of advanced technologies such as zero trust, secure access service edge (SASE), and AI/ML-based threat detection.

 

REQUIRED EDUCATION/EXPERIENCE/SKILLS:

• Bachelor’s degree in Computer Science, Information Systems or related field required. Advanced degree preferred.
• 12+ years of progressive ex