Biotech CISO & Security Strategy Leader

Socket.dev; Cambridge (MA); On-site; USD 230,000 - 360,000; Full time

Job summary

Scholar Rock is seeking a Senior Director, Cybersecurity to serve as the company’s Chief Information Security Officer, responsible for building and scaling enterprise cybersecurity capabilities that protect the organization’s people, data, technology assets, intellectual property, and business operations.

Reporting to the CIO, this role defines and executes the cybersecurity strategy and roadmap in partnership with enterprise stakeholders across technology, Legal, Privacy, HR, Finance, Quality,

Qualifications

• Bachelor's degree in Information Security, Computer Science, or related field.
• 12+ years of progressive cybersecurity experience with leadership.
• Experience in regulated environments and risk management.
• Strong knowledge of NIST Framework and compliance controls.
• CISSP certification or equivalent preferred.

Responsibilities

• Define and execute the cybersecurity strategy, roadmap, priorities, and operating model.
• Establish governance, policies, standards, and control frameworks.
• Lead security operations including vulnerability management and incident response.
• Drive governance, risk, and compliance programs aligned with regulatory requirements.
• Develop data protection, privacy, and data governance practices with stakeholders.
• Lead vendor management and service-provider governance for cybersecurity.

Skills

Cybersecurity leadership

Security governance

Risk management

Executive communication

Stakeholder management

Security architecture

Education

Bachelor's degree in Information Security

Job description

Scholar Rock is seeking a Senior Director, Cybersecurity to serve as the company’s Chief Information Security Officer, responsible for building and scaling enterprise cybersecurity capabilities that protect the organization’s people, data, technology assets, intellectual property, and business operations.

Reporting to the CIO, this role defines and executes the cybersecurity strategy and roadmap in partnership with enterprise stakeholders across technology, Legal, Privacy, HR, Finance, Quality,