Lead Security, Risk, and Compliance Specialist

California, US residents click here.

The job details are as follows:

Who We Are

We are the first publicly-traded biotech or pharmaceutical company to take the form of a public benefit corporation. Our public benefit purpose is to provide a brighter future for patients through the development of novel pharmaceutical therapies; and technologies that expand the availability of transplantable organs.
 

United Therapeutics (Nasdaq: UTHR) seeks to travel down the corridors of indifference to develop treatments for rare, deadly diseases. We were founded in 1996 by a family seeking a cure for their daughter’s pulmonary arterial hypertension (PAH). Today, we have six FDA-approved therapies that treat PAH, pulmonary hypertension associated with interstitial lung disease (PH-ILD) and neuroblastoma, a rare pediatric cancer. Our near-term pipeline seeks to develop additional therapies for PAH and pulmonary fibrosis (PF).
 

The cure for end-stage life-threatening diseases like PAH, PH-ILD, PF, and many others is an organ transplant, but only a small percentage of donated organs are available to address the vast need. For this reason, we are working to create manufactured organs to address the shortage of kidneys, hearts, lungs, and livers available for transplant. We believe an unlimited supply of tolerable, transplantable organs will eliminate the transplant waiting list and cure end-stage organ diseases for which transplant is not currently an option.


Who you are

This role partners with senior management to safeguard intellectual property, protect critical manufacturing systems, ensure compliance with FDA regulations, and strengthen the cyber defense posture. The Lead Security, Risk and Compliance Specialist leads cross functional security initiatives and assists with representing the cybersecurity function with internal and external stakeholders.
 

• Support senior management in developing and executing the global cybersecurity strategy aligned to business, compliance, and manufacturing priorities
• Serve as the operational lead for enterprise security governance, risk management, and compliance programs across multiple regions and regulatory environments
• Drive adoption of security frameworks such as NIST CSF, NIST AI RMF, 21 CFR Part 11 and other industry specific requirements in alignment with organizational culture and risk appetite
• Partner with senior management to oversee outsourced MDR Security Operations Center (SOC), threat intelligence, incident response, investigations, security architecture and maintain cybersecurity regulatory/legal requirements
• Oversee development of advanced defense capabilities including zero trust architecture, identity security, and endpoint/OT protection
• Ensure successful delivery of security programs such as Identity and Access Management, Vulnerability Management and Cloud Security
• Partner with senior management to manage delivery of the IT Risk Management program. Direct IT risk assessments, manage IT risk register, supplier security evaluations, penetration testing and assist with audits across operations
• Partner with Legal, Privacy, Compliance, Information Technology, other key stake holders to ensure adherence to IT security and regulatory requirements
• Ensure AI risks are incorporated into the IT risk management program and are managed in accordance with the organization’s risk appetite and culture
• Collaborate with OT and other key business leaders to embed security into product design, avionics systems, and industrial control systems
• Operationalize security programs for manufacturing, research and development, IoT and other life sciences technologies
• Ensure secure integration of IT/OT systems, ensure required availability and protection of proprietary intellectual property
• Mentor and develop technical teams
• All other duties as required

Minimum Requirements

• Bachelor’s Degree in cybersecurity, computer science, or related field
• 8+ years of progressive experience in cybersecurity, including leadership roles in biotechnology/pharmaceutical organizations
• CISSP Certified Information Systems Security Professional
• Progressive experience in cybersecurity, including leadership roles in biotechnology/pharmaceutical organizations
• Experience securing OT/ICS environments and manufacturing systems
• Proven ability to lead teams, manage crises, and influence senior leaders and executives
• Ability to operate effectively in a high throughput, demandi