Information Security Director

Michael Page (Switzerland); Vaud; Hybrid; CHF 180,000 - 280,000; Full time

Benefits offered by this job

Home Office 2 days per week

International environment

Competitive compensation package

Career development opportunities

Job summary

Michael Page (Switzerland) is seeking an experienced cybersecurity leader to define and drive the enterprise security program in a fast-growing biopharma, with a cloud-first environment and strict regulatory requirements. Reporting to the IT VP, you will shape strategy, governance, risk, and incident response across the organization.

You will own security architecture for cloud, apps, endpoints, and collaboration tools ( Microsoft 365, Entra ID, Azure ), lead IAM, audits, vendor management, and

Qualifications

• Bachelor's or master's degree in information security, CS, IT, engineering, or related field.
• 10+ years in cybersecurity and IT, incl. 3–5 years in leadership.
• Proven enterprise security program experience in regulated environments.
• Experience securing Microsoft 365, Entra ID, Azure, and cloud infrastructures.
• ISO 27001 / NIST CSF / SOC 2 familiarity or similar standards.
• Strong communication to executives and non-technical stakeholders.

Responsibilities

• Define, implement and continuously enhance the enterprise cybersecurity program.
• Lead governance, risk management and compliance initiatives including audits.
• Own security architecture across cloud, infrastructure, apps, endpoints, and collaboration tools (MS 365, Entra ID).
• Oversee IAM processes, provisioning, privileged access, and authentication standards.
• Direct security operations: threat detection, vulnerability management, incident response.
• Manage MSSPs, security consultants, testers, and technology vendors.
• Lead business continuity, disaster recovery, and cyber resilience initiatives.
• Establish cybersecurity KPIs and provide executive reporting and guidance.
• Drive data protection, privacy, and information security initiatives.
• Evaluate emerging technologies and AI-related risk controls for secure adoption.
• Promote cybersecurity culture through awareness and stakeholder engagement.

Skills

Security governance

Cloud security

IAM

Incident response

Vendor management

Leadership

Communication

Education

Bachelor's or Master's in Information Security / CS / IT

Tools

Microsoft 365

Entra ID

Azure

Job description

• International Environment
• Hands-on and Security Governance

About Our Client

Our client is an innovative and fast-growing biopharmaceutical company focused on developing transformational therapies for patients with ophthalmic and neuro-ophthalmic diseases. Operating internationally in a highly regulated industry, the organization leverages a modern, cloud-first technology environment and is committed to investing in cybersecurity, digital transformation, and operational excellence to support its long-term growth ambitions.

Job Description

Our client is seeking an experienced and hands-on cybersecurity leader to define, implement, and continuously enhance its enterprise security program. Reporting to the VP of IT, this role combines strategic leadership with operational execution across cybersecurity governance, risk management, cloud security, identity management, compliance, and incident response. The successful candidate will play a critical role in protecting the organization's digital assets, supporting business growth, and ensuring a robust security posture within a highly regulated environment.

• Develop, implement, and continuously enhance the company's cybersecurity strategy, ensuring alignment with business objectives, regulatory requirements, and industry best practices.
• Lead cybersecurity governance, risk management, and compliance programs, including policy development, risk assessments, internal controls, and audit readiness.
• Own the security architecture across cloud, infrastructure, applications, endpoints, and collaboration platforms, with a strong focus on Microsoft 365 and Entra ID environments.
• Oversee identity and access management (IAM) processes, ensuring secure user provisioning, privileged access controls, and authentication standards.
• Direct security operations, including threat detection, vulnerability management, incident response, and remediation activities in collaboration with internal and external partners.
• Manage cybersecurity third-party service providers, including MSSPs, security consultants, penetration testing firms, and technology vendors.
• Lead business continuity, disaster recovery, and cyber resilience initiatives to ensure operational preparedness and rapid recovery capabilities.
• Establish and monitor cybersecurity KPIs and metrics, providing regular executive-level reporting and recommendations to leadership.
• Drive data protection, privacy, and information security initiatives, ensuring appropriate safeguards for critical business and research data.
• Evaluate emerging technologies, including AI-related risks and controls, to ensure secure adoption and governance.
• Promote a strong cybersecurity culture through awareness programs, employee education, and stakeholder engagement across the organization.

The Successful Applicant

• Bachelor's or master's degree in information security, Computer Science, Information Technology, Engineering, or a related field.
• Minimum 10 years of progressive experience in cybersecurity and IT, including at least 3-5 years in a leadership or management role.
• Proven track record of developing and executing enterprise cybersecurity programs within complex and highly regulated environments.
• Strong expertise in cybersecurity governance, risk management, security operations, incident response, and vulnerability management.
• Hands-on experience securing Microsoft 365, Entra ID, Azure, endpoint protection platforms, and cloud-based infrastructures.
• Deep understanding of identity and access management, 0-trust principles, network security, and modern cybersecurity architectures.
• Experience leading security audits, regulatory assessments, and compliance initiatives aligned with frameworks such as ISO 27001, NIST CSF, SOC 2, or similar standards.
• Previous experience in pharmaceutical, biotechnology, healthcare, medical device, or other regulated industries is highly desirable.
• Demonstrated ability to communicate technical and cyber risk topics to executive leadership, board members, and non-technical stakeholders.
• Strong project management and vendor management capabilities, with experience leading cross-functional initiatives.
• Relevant professional certifications such as CISSP, CISM, CCSP, CRISC, or Microsoft Security certifications are highly valued.
• Excellent leadership, communication, problem-solving, and stakeholder management skills, with the ability to influence decision-making across all levels of the organization.

What's on Offer

• Attractive package and environment
• Flexibility with 2 days of Home Office per week
• A unique opportunity to build, lead, and shape a growing cybersecurity function within an innovative and international organization.
• Ownership of high-impact cybersecurity, compliance, and digital transformation initiatives.
• A collaborative and dynamic work environment that values innovation, continuous improvement, and professional development.
• Exposure to cutting-edge technologies, cloud environments, and evolving cybersecurity challenges.
• Competitive compensation package, comprehensive benefits, and attractive long-term career growth opportunities.