Information Security Director

Michael Page; Vaud; Híbrido; CHF 240.000 - 320.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Home office 2 days per week

Competitive compensation package

Descripción de la vacante

Michael Page is partnering with a fast-growing biopharmaceutical client to hire a hands-on cybersecurity leader. You will define, implement, and continuously enhance an enterprise security program, reporting to the VP of IT and balancing strategic leadership with operational execution across governance, risk, cloud security, IAM, compliance, and incident response.

You will own security architecture for Microsoft 365, Entra ID, and cloud infrastructures, lead audits and regulatory initiatives,

Formación

• Bachelor's or master's degree in information security, Computer Science, Information Technology, Engineering, or a related field.
• 10+ years of progressive cybersecurity experience, with 3–5 years in a leadership role.
• Proven track record delivering enterprise cybersecurity programs in regulated environments.

Responsabilidades

• Define and lead the enterprise security program aligned with regulatory requirements.
• Oversee governance, risk management, and compliance initiatives.
• Own security architecture across cloud, on-prem, and endpoints, focusing on Microsoft 365 and Entra ID.
• Manage IAM processes, privileged access controls, and authentication standards.
• Direct security operations: threat detection, vulnerability management, and incident response.
• Lead third-party security providers, audits, and regulatory assessments.
• Drive business continuity, disaster recovery, and cyber resilience initiatives.
• Provide executive-level reporting on cybersecurity KPIs and risk.
• Promote data protection, privacy, and information security across the org.

Conocimientos

Cybersecurity governance

Risk management

Cloud security

IAM / Entra ID

Incident response

Vulnerability management

Regulatory compliance

Executive communication

Educación

Bachelor's or Master's in information security / CS / IT / Engineering

Herramientas

Microsoft 365

Entra ID

Azure

Endpoint protection

Descripción del empleo

• International Environment
• Hands-on and Security Governance

About Our Client

Our client is an innovative and fast-growing biopharmaceutical company focused on developing transformational therapies for patients with ophthalmic and neuro-ophthalmic diseases. Operating internationally in a highly regulated industry, the organization leverages a modern, cloud-first technology environment and is committed to investing in cybersecurity, digital transformation, and operational excellence to support its long-term growth ambitions.

Job Description

Our client is seeking an experienced and hands-on cybersecurity leader to define, implement, and continuously enhance its enterprise security program. Reporting to the VP of IT, this role combines strategic leadership with operational execution across cybersecurity governance, risk management, cloud security, identity management, compliance, and incident response. The successful candidate will play a critical role in protecting the organization's digital assets, supporting business growth, and ensuring a robust security posture within a highly regulated environment.

• Develop, implement, and continuously enhance the company's cybersecurity strategy, ensuring alignment with business objectives, regulatory requirements, and industry best practices.
• Lead cybersecurity governance, risk management, and compliance programs, including policy development, risk assessments, internal controls, and audit readiness.
• Own the security architecture across cloud, infrastructure, applications, endpoints, and collaboration platforms, with a strong focus on Microsoft 365 and Entra ID environments.
• Oversee identity and access management (IAM) processes, ensuring secure user provisioning, privileged access controls, and authentication standards.
• Direct security operations, including threat detection, vulnerability management, incident response, and remediation activities in collaboration with internal and external partners.
• Manage cybersecurity third-party service providers, including MSSPs, security consultants, penetration testing firms, and technology vendors.
• Lead business continuity, disaster recovery, and cyber resilience initiatives to ensure operational preparedness and rapid recovery capabilities.
• Establish and monitor cybersecurity KPIs and metrics, providing regular executive-level reporting and recommendations to leadership.
• Drive data protection, privacy, and information security initiatives, ensuring appropriate safeguards for critical business and research data.
• Evaluate emerging technologies, including AI-related risks and controls, to ensure secure adoption and governance.
• Promote a strong cybersecurity culture through awareness programs, employee education, and stakeholder engagement across the organization.

The Successful Applicant

• Bachelor's or master's degree in information security, Computer Science, Information Technology, Engineering, or a related field.
• Minimum 10 years of progressive experience in cybersecurity and IT, including at least 3-5 years in a leadership or management role.
• Proven track record of developing and executing enterprise cybersecurity programs within complex and highly regulated environments.
• Strong expertise in cybersecurity governance, risk management, security operations, incident response, and vulnerability management.
• Hands-on experience securing Microsoft 365, Entra ID, Azure, endpoint protection platforms, and cloud-based infrastructures.
• Deep understanding of identity and access management, 0-trust principles, network security, and modern cybersecurity architectures.
• Experience leading security audits, regulatory assessments, and compliance initiatives aligned with frameworks such as ISO 27001, NIST CSF, SOC 2, or similar standards.
• Previous experience in pharmaceutical, biotechnology, healthcare, medical device, or other regulated industries is highly desirable.
• Demonstrated ability to communicate technical and cyber risk topics to executive leadership, board members, and non-technical stakeholders.
• Strong project management and vendor management capabilities, with experience leading cross-functional initiatives.
• Relevant professional certifications such as CISSP, CISM, CCSP, CRISC, or Microsoft Security certifications are highly valued.
• Excellent leadership, communication, problem-solving, and stakeholder management skills, with the ability to influence decision-making across all levels of the organization.

What's on Offer

• Attractive package and environment
• Flexibility with 2 days of Home Office per week
• A unique opportunity to build, lead, and shape a growing cybersecurity function within an innovative and international organization.
• Ownership of high-impact cybersecurity, compliance, and digital transformation initiatives.
• A collaborative and dynamic work environment that values innovation, continuous improvement, and professional development.
• Exposure to cutting-edge technologies, cloud environments, and evolving cybersecurity challenges.
• Competitive compensation package, comprehensive benefits, and attractive long-term career growth opportunities.

Quote job ref: JN-102026-7132431