Cyber Security Manager

Before reading the job post, we encourage you to watch this video about our company. It gives you an inside look at how we started, the team and culture that made us successful, and where we're going. It's easy to read a job post and apply, but people often wonder about the culture and whether they would fit in. If you want to call Harrow your home and genuinely want to be part of a family and something big, then we encourage you to click this link and get to know us.

 

Who is Harrow?

Harrow (NASDAQ: HROW) is one of the leading U.S. ophthalmic-focused pharmaceuticals companies.  Aside from being a for-profit company, from a cultural perspective, all members of the Harrow Family are proud of our commitment to (1) innovation, (2) patient access to, and affordability of, our medicines, and (3) that we have never turned down an ophthalmologist doing mission work around the world – to provide free-medicines – to support their work to give to the gift of sight to those most in need.    

Harrow owns numerous branded pharmaceutical products, including Iopidine, Maxitrol, Moxeza, Triecense, Vigamox, Maxidex, Nevanac, Ilevro, and Iheezo. In addition, Harrow owns and operates ImprimisRx, the nation’s leading ophthalmology-focused compounded pharmaceuticals, including its FDA-registered and FDA-inspected 503B outsourcing facility and a 50-state mail order pharmacy – both of which are in Ledgewood, New Jersey.

Harrow also holds non-controlling equity positions in Eton Pharmaceuticals, Surface Ophthalmics, and Melt Pharmaceuticals, all of which started as Harrow Health subsidiaries, and owns royalty rights in four clinical-stage drug candidates being developed by Surface Ophthalmics and Melt Pharmaceuticals. 

At Harrow, we foster our individual and collective entrepreneurial and creative spirits. We focus on pursuing opportunities for drug candidates in underserved markets. We are data-driven and use our access to real-world clinical experience to lower the investment risks of our work. We concentrate on the commercial appeal of high-value assets, and our objective is to seek to make paradigm-shifting medicines available to patients as soon as possible. Our approach to finding high-value opportunities and balancing risk with real-world experience can deliver exceptional value for all our stakeholders

Summary:

This role requires a deep understanding of information security principles, technologies, and practices to develop and implement strategies that protect the organization's digital assets from potential threats and breaches. The Cybersecurity Manager leads IT resources and collaborates with other departments to ensure a strong security posture across the organization. Join our team as a Cybersecurity Manager and play a vital role in safeguarding Harrow’s assets, protecting customer data, and ensuring a secure digital environment for our operations.

 

Roles and Responsibilities:

• Define and execute the organization's cybersecurity strategy and roadmap.
• Identify potential security risks and develop appropriate measures to mitigate them.
• Oversee the day-to-day operations of the cybersecurity team.
• Establish and enforce security policies, procedures, and standards.
• Monitor and analyze security alerts, incidents, and vulnerabilities.
• Coordinate incident response activities and lead investigations into security breaches.
• Conduct regular security assessments, penetration testing, and audits.
• Design and implement a robust security architecture for the organization's systems and networks.
• Evaluate and recommend security technologies, tools, and services.
• Ensure compliance with applicable cybersecurity laws, regulations, and industry standards.
• Conduct risk assessments and develop risk mitigation strategies.
• Collaborate with legal and compliance teams to address privacy and data protection requirements.
• Establish and maintain relationships with external partners, vendors, and industry organizations.
• Develop and maintain an incident response plan and coordinate its execution.
• Conduct post-incident analysis and implement measures to prevent future incidents.

 

Qualifications:

• Bachelor's degree in computer science, information security, or relevant work experience.
• Professional certifications such as CISSP (Certified Information Systems Security Professional), CISM (Certified Information Security Manager), or equivalent.
• Minimum 5 years in cybersecurity.
• In-depth knowledge of cybersecurity principles, technologies, and best practices.
• Strong understanding of networking, operating systems, and cloud platforms.
• Experience