Global Cybersecurity Lead – Pharmaceutical Division

Responsibilities

• Contribute to the development and execution of the global cybersecurity strategy aligned with ALS’s corporate objectives and international regulatory frameworks (GxP, ISO 27001, NIST, GDPR, 21 CFR Part 11).
• Manage third‑party risk assessments for technology vendors, partners, and digital supply chain providers.
• Lead global risk management initiatives, including threat assessment, vulnerability management, and mitigation plans for IT and OT environments.
• Oversee security across hybrid infrastructures, including laboratory information systems (LIMS, ELN, CDS), cloud platforms, and industrial control systems (SCADA, PLCs).
• Coordinate global incident response, ensuring timely communication, investigation, and remediation of security events.
• Review current security policies in place across the laboratories of the group to assess current practice and local requirements.
• Define corporate security policies and standards to support harmonisation and consistency of practice locally.
• Partner with global and regional teams to ensure compliance with corporate policies, GxP, data protection, and privacy regulations.
• Lead security awareness and training programs tailored to scientific, technical, and operational personnel.
• Collaborate with Quality, R&D, Production, and Legal to embed security by design into systems and processes.
• Monitor and report cybersecurity KPIs and maturity metrics to Chief Information Security Officer executive committees.
• Lead and coordinate responses to RFIs, security questionnaires, and due‑diligence requests regarding IT security and compliance.

Requirements

• Bachelor’s or Master’s degree in Computer Science, Information Security, Telecommunications, or a related field.
• Advanced training or postgraduate studies in cybersecurity or technology risk management.
• Recognized certifications such as CISM, CISSP, ISO 27001 Lead Implementer/Auditor, GICSP, NIST CSF Practitioner are highly valued.
• Minimum 8 years of professional experience in cybersecurity, with 3–5 years in a leadership or global coordination role.
• Proven experience in pharmaceutical, biotechnology, or scientific research environments.
• Strong knowledge of regulated environments (GxP) and industrial/OT security (ISA/IEC 62443).
• Experience managing security across cloud platforms (AWS, Azure, GCP) and hybrid infrastructures.
• Demonstrated ability to manage complex, multinational security programs.

#J-18808-Ljbffr