Global Cybersecurity Lead – Pharmaceutical Division

Jobtailor; Madrid; Presencial; EUR 90.000 - 140.000; Jornada completa

Descripción de la vacante

ALS is seeking a Director of Cybersecurity to shape and execute the global security strategy, aligned with GxP, ISO 27001, NIST, GDPR and 21 CFR Part 11. You will manage third-party risk, lead risk management across IT/OT, and secure hybrid infrastructures including LIMS, ELN, CDS, cloud platforms and SCADA/PLC systems.

You will drive incident response, policy review, and security training, partnering with Quality, R&D, Production and Legal to embed security by design.

Formación

• Bachelor’s or Master’s in Computer Science, Information Security, Telecommunications, or related field.
• Advanced training or postgraduate studies in cybersecurity or technology risk management.
• Certifications such as CISM, CISSP, ISO 27001 Lead Implementer/Auditor, GICSP, NIST CSF Practitioner are highly valued.
• Minimum 8 years of professional cybersecurity experience, with 3–5 years in leadership/global coordination.
• Experience in pharmaceutical, biotechnology, or scientific research environments.
• Strong knowledge of regulated environments (GxP) and industrial/OT security (ISA/IEC 62443).
• Experience managing security across cloud platforms (AWS, Azure, GCP) and hybrid infrastructures.
• Proven ability to manage complex multinational security programs.

Responsabilidades

• Contribute to development and execution of global cybersecurity strategy aligned with GxP, ISO 27001, NIST, GDPR, 21 CFR Part 11.
• Manage third-party risk assessments for technology vendors and digital supply chain providers.
• Lead global risk management initiatives including threat assessment and vulnerability management for IT/OT.
• Oversee security across hybrid infrastructures, including LIMS, ELN, CDS, cloud platforms, SCADA/PLC.
• Coordinate global incident response with timely communication, investigation, remediation.

Descripción del empleo

Responsibilities

• Contribute to the development and execution of the global cybersecurity strategy aligned with ALS’s corporate objectives and international regulatory frameworks (GxP, ISO 27001, NIST, GDPR, 21 CFR Part 11).
• Manage third‑party risk assessments for technology vendors, partners, and digital supply chain providers.
• Lead global risk management initiatives, including threat assessment, vulnerability management, and mitigation plans for IT and OT environments.
• Oversee security across hybrid infrastructures, including laboratory information systems (LIMS, ELN, CDS), cloud platforms, and industrial control systems (SCADA, PLCs).
• Coordinate global incident response, ensuring timely communication, investigation, and remediation of security events.
• Review current security policies in place across the laboratories of the group to assess current practice and local requirements.
• Define corporate security policies and standards to support harmonisation and consistency of practice locally.
• Partner with global and regional teams to ensure compliance with corporate policies, GxP, data protection, and privacy regulations.
• Lead security awareness and training programs tailored to scientific, technical, and operational personnel.
• Collaborate with Quality, R&D, Production, and Legal to embed security by design into systems and processes.
• Monitor and report cybersecurity KPIs and maturity metrics to Chief Information Security Officer executive committees.
• Lead and coordinate responses to RFIs, security questionnaires, and due‑diligence requests regarding IT security and compliance.

Requirements

• Bachelor’s or Master’s degree in Computer Science, Information Security, Telecommunications, or a related field.
• Advanced training or postgraduate studies in cybersecurity or technology risk management.
• Recognized certifications such as CISM, CISSP, ISO 27001 Lead Implementer/Auditor, GICSP, NIST CSF Practitioner are highly valued.
• Minimum 8 years of professional experience in cybersecurity, with 3–5 years in a leadership or global coordination role.
• Proven experience in pharmaceutical, biotechnology, or scientific research environments.
• Strong knowledge of regulated environments (GxP) and industrial/OT security (ISA/IEC 62443).
• Experience managing security across cloud platforms (AWS, Azure, GCP) and hybrid infrastructures.
• Demonstrated ability to manage complex, multinational security programs.