Associate Director, Information and Cyber Security

Bicycle Therapeutics; Cambridge; Remote; GBP 70,000 - 90,000; Full time

Job summary

A clinical-stage biopharmaceutical company in Cambridge seeks an experienced Information and Cyber Security Manager. This role involves protecting digital assets and data against evolving threats while ensuring compliance with cybersecurity standards like GDPR and ISO27001. Join a growing team in a fully remote capacity within the UK, contributing significantly to delivering innovative oncology medicines.

Benefits

Flexible working environment

28 days annual leave plus bank holidays

Life assurance cover 4x salary

Private Medical Insurance including dental

Employee recognition schemes

Qualifications

• Proven track record in cyber and information security delivery.
• Familiar with security certifications and proactive systems.
• Experience in risk management and incident response.

Responsibilities

• Lead Security Operations Center to manage incidents.
• Ensure compliance with cybersecurity laws and standards.
• Continuously improve Cyber Security Management Systems.

Skills

Cybersecurity

Risk Management

Incident Response

Education

Relevant industry experience

Tools

ISO27001

NIST

Job description

Company Description

Bicycle Therapeutics is a clinical-stage biopharmaceutical company developing a novel class of medicines, referred to as Bicycle molecules, for diseases that are underserved by existing therapeutics. Bicycle molecules are fully synthetic short peptides constrained with small molecule scaffolds to form two loops that stabilize their structural geometry. This constraint facilitates target binding with high affinity and selectivity, making Bicycle molecules attractive candidates for drug development. The company is evaluating zelenectide pevedotin (previously BT8009), a Bicycle Toxin Conjugate (BTC) targeting Nectin-4, a well-validated tumor antigen; BT5528, a BTC targeting EphA2, a historically undruggable target; and BT7480, a Bicycle Tumor-Targeted Immune Cell Agonist (Bicycle TICA) targeting Nectin-4 and agonizing CD137, in company-sponsored clinical trials. Additionally, the company is developing Bicycle Radio Conjugates (BRC) for radiopharmaceutical use and, through various partnerships, is exploring the use of Bicycle technology to develop therapies for diseases beyond oncology.

Bicycle Therapeutics is headquartered in Cambridge, UK, with many key functions and members of its leadership team located in Cambridge, Massachusetts.

Culture is key and all Bicycle employees actively embrace and role model our company values:

• WeareAdventurous.We believe it’sthewaytodeliverextraordinaryresultsforourpatients.
• WeareDedicatedtoourMission.Youcan’tchangetheworldifyoudon’thavedetermination.
• WeareOneTeam.Weonlysucceedwhenweworktogether.

Job Description

We have an exciting new opportunity for an experienced Information and Cyber Security Manager to join our growing team. In this role you will operate and continuously improve the organisation’s cyber and information security capabilities. Working closely across our business areas, you will ensure that our digital assets, data, intellectual property and operational technologies are continuously protected against an evolving threat landscape. We are looking for a passionate individual where your expertise, diversity of thought and broad experiences will directly contribute to the successful achievement of our Bicycle ambition – to bring novel oncology medicines to patients.

We are open to hiring this role fully remote based in the UK, with routine travel to our Cambridge site. Additionally, we would also consider those than can commit to working at least 0.8 FTE.

As the Information & Cyber Security Manager, you will be responsible for:

• Security Operations Center Lead (SOC Lead) for Bicycle ensuring that incidents are detected, analysed, responded to and reported effectively to protect Bicycle Therapeutics daily activities.
• Threat intelligence and proactive defence to predict and proactively defend against cyberattacks
• Proactive maintenance and continuous improvement of the Cyber Security Management System to ensure effective protection and resilience is maintained
• Management and continuous improvement of the Information Security Management System that is in place.
• Proactive assessment of information security risks and resolution of issues as required in collaboration with Data Privacy Counsel and the Legal team. This will include 3rd party suppliers and partners lifecycle.
• Ensuring compliance with contemporary cybersecurity and data protection laws, regulations and standards such as GDPR, ISO27001 etc.
• Through partnership and coaching, promote a culture where information and cyber security is recognised as a critical component of work, setting clear standards and expectations for employees at Bicycle
• Provide reports to support governance and executive leadership on cyber risk, resilience posture, and key performance indicators

Qualifications

Essential experience:

• A proven track record of cyber and information security delivery, with relevant industry or academic experience to meet the requirements of the role.
• Delivery within a proactive cybersecurity system where monitoring and threat intelligence drive delivery alongside great response to incidents as they emerge, including in partnership with 3rd parties.
• Familiar with the application of security certifications such as ISO27001, NIST to global organisations with significant outsourced value stream activities
• Leadership of information security, data privacy and data handling issues in organisations with significant outsourced value stream activities
• In the field of Information and Cyber Security experience of; risk management processes, management of incident and resolution, development and reporting of key KPIs, audit and continuous improvement response and delivery through external partnerships
• Definition and delivery of policy and process documentation to support incident response, proactive management and audit

Essential capabilities:

• Development agility – Bicycle is a growing and evolving company. You will have the opportunity to be self-starting, entrepreneurial and eager to develop within a supportive environment
• Partnership – Information and cyber security is critical to our business success. You will need to deliver with business stakeholders not to them – our employees are key components of our organisational Information and Cyber Security, you will need to bring them with you
• Thoughtful risk-based leadership - Experience of responding to data incident / breaches, either directly or through “table top” exercises. Ability to proactively identify issues, think strategically, propose and implement practical solutions

Additional Information

• State-of-the-art campus environmentwith on campus restaurant and Montessori nursery
• Flexible working environment
• Competitive reward including annual company bonus
• Employee recognition schemes
• 28 days annual leave in addition to bank holidays+ option to buy up to 5 additional days annually
• Employer contribution to pension (employee does not have to contribute)
• Life assurance cover 4x basic salary
• Private Medical Insurance, including optical and dental cover.
• Group income protection
• Employee assistance program
• Health Cash Plan
• Access to company subsidized gym membership.
• Eligibility for an option grant to subscribe to shares in Bicycle Therapeutics plc.
• Cycle to work scheme

Bicycle Therapeutics is committed to building a diverse workforce that is representative of the communities we serve. We recognize that diverse and inclusive teams build a stronger and more innovative company. Therefore, all qualified applicants will be considered for employment, and we do not discriminate on the basis of race, religion, colour, gender, sexual orientation, age, disability status, marital status, or veteran status.