Senior Director, Cyber Security Strategy & Risk

Clarivate Analytics US LLC; Montpelier (VT); On-site; USD 188,000 - 235,000; Full time

Job summary

Clarivate Analytics US LLC is seeking a Senior Director of Cyber Security to lead the Information Security team and advance an enterprise-wide security program across technology, product, engineering, privacy, and compliance. The role focuses on reducing risk, maturing controls, and protecting healthcare and life sciences data and customers.

The ideal candidate has 12+ years in cyber security within regulated environments, 5+ years in leadership, and strong experience translating risk into

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field, or equivalent relevant experience.
• 12+ years of experience in cyber security within healthcare, life sciences, or other highly regulated environments.
• 5+ years of experience leading cyber security teams, programs, or cross-functional security initiatives.
• Familiarity with healthcare and life sciences requirements and standards, including GxP, FDA regulations, 21 CFR Part 11, HIPAA, computerized system validation, and data integrity principles.
• Experience defining and executing enterprise cyber security strategy, roadmaps, controls, and operating models.
• Experience overseeing security operations, incident response, vulnerability management, threat monitoring, security engineering, or cyber risk management.
• Working knowledge of security and compliance frameworks such as ISO 27001, SOC 2, NIST, CIS Controls, or similar standards.
• Experience translating cyber risk, security metrics, and technical concepts into clear recommendations for senior leadership and business stakeholders.

Responsibilities

• Define and execute the cyber security strategy, roadmap, and operating model to reduce enterprise risk and strengthen Clarivate's security posture.
• Lead cyber security programs across security operations, incident response, vulnerability management, security engineering, governance, risk, and compliance.
• Partner with Technology, Product, Engineering, Privacy, Legal, Compliance, Procurement, and business leaders to embed security requirements into products, platforms, processes, and vendor relationships.
• Oversee monitoring, escalation, investigation, and response processes for security incidents, including coordination with internal teams and external partners as needed.
• Drive improvement of security controls, policies, standards, procedures, dashboards, metrics, and reporting aligned to internal requirements and external frameworks.
• Evaluate current and emerging cyber threats, identify security gaps, and prioritize remediation activities in partnership with technology and product teams.
• Support audit, certification, customer assurance, and regulatory activities by ensuring security practices are documented, measurable, and continuously improved.
• Develop and lead a high-performing cyber security team, including resource planning, capability development, coaching, and prioritization of work against business-critical objectives.
• Communicate cyber risk, program performance, incident trends, and strategic recommendations to executive and senior leadership audiences.

Skills

Cybersecurity leadership

Enterprise security strategy

Security operations

Risk management

Cloud security

Incident response

Security governance

Stakeholder communication

Education

Bachelor's degree

Tools

SIEM

EDR/XDR

IAM

DLP

Vulnerability management

Job description

Clarivate Analytics US LLC is seeking a Senior Director of Cyber Security to lead the Information Security team and advance an enterprise-wide security program across technology, product, engineering, privacy, and compliance. The role focuses on reducing risk, maturing controls, and protecting healthcare and life sciences data and customers.

The ideal candidate has 12+ years in cyber security within regulated environments, 5+ years in leadership, and strong experience translating risk into