Global Cybersecurity Leader — Risk & Compliance

ALS; Madrid; Hybrid; EUR 90,000 - 140,000; Full time

Job summary

ALS is seeking a Director of Cybersecurity to shape and execute the global security strategy, aligned with GxP, ISO 27001, NIST, GDPR and 21 CFR Part 11. You will manage third-party risk, lead risk management across IT/OT, and secure hybrid infrastructures including LIMS, ELN, CDS, cloud platforms and SCADA/PLC systems.

You will drive incident response, policy review, and security training, partnering with Quality, R&D, Production and Legal to embed security by design.

Qualifications

• Bachelor’s or Master’s in Computer Science, Information Security, Telecommunications, or related field.
• Advanced training or postgraduate studies in cybersecurity or technology risk management.
• Certifications such as CISM, CISSP, ISO 27001 Lead Implementer/Auditor, GICSP, NIST CSF Practitioner are highly valued.
• Minimum 8 years of professional cybersecurity experience, with 3–5 years in leadership/global coordination.
• Experience in pharmaceutical, biotechnology, or scientific research environments.
• Strong knowledge of regulated environments (GxP) and industrial/OT security (ISA/IEC 62443).
• Experience managing security across cloud platforms (AWS, Azure, GCP) and hybrid infrastructures.
• Proven ability to manage complex multinational security programs.

Responsibilities

• Contribute to development and execution of global cybersecurity strategy aligned with GxP, ISO 27001, NIST, GDPR, 21 CFR Part 11.
• Manage third-party risk assessments for technology vendors and digital supply chain providers.
• Lead global risk management initiatives including threat assessment and vulnerability management for IT/OT.
• Oversee security across hybrid infrastructures, including LIMS, ELN, CDS, cloud platforms, SCADA/PLC.
• Coordinate global incident response with timely communication, investigation, remediation.

Job description

ALS is seeking a Director of Cybersecurity to shape and execute the global security strategy, aligned with GxP, ISO 27001, NIST, GDPR and 21 CFR Part 11. You will manage third-party risk, lead risk management across IT/OT, and secure hybrid infrastructures including LIMS, ELN, CDS, cloud platforms and SCADA/PLC systems.

You will drive incident response, policy review, and security training, partnering with Quality, R&D, Production and Legal to embed security by design.