Apply on Employer Site

Insmed Incorporated · 2 weeks ago

Executive Director, Cybersecurity & Risk Management

Headquarters, NJ

Full-time

Hybrid

Director/Executive

$247K/yr - $345K/yr

15+ years exp

Insmed Incorporated is a global biopharmaceutical company dedicated to transforming the lives of patients with serious and rare diseases. They are seeking an experienced leader to oversee cybersecurity operations and enterprise risk management, ensuring compliance with regulatory requirements while maintaining operational excellence.

BiotechnologyMedicalPharmaceutical

Growth Opportunities

H1B Sponsor Likely

Responsibilities

Define, communicate, and execute Insmed’s cybersecurity and risk management vision, ensuring alignment with the company’s values, business priorities, and regulatory commitments

Present cybersecurity posture, emerging threats, and key initiatives to the CIO, IT Leadership Team, and, as needed, the Executive Committee and Board of Directors

Establish and maintain governance frameworks and control structures consistent with NIST and FDA data protection standards

Partner with Legal, Compliance, Clinical Operations, Quality and R&D to proactively manage risk across Insmed’s technology landscape and protect sensitive patient and research data

Demonstrated experience leading a Computer Systems Validation team in a regulated (pharmaceutical, biotech, or healthcare) environment is a plus

Foster a culture of security accountability and awareness, ensuring every employee understands their role in protecting Insmed’s mission and assets

Lead and participate directly in cybersecurity operations, including incident response, threat detection, vulnerability management, and risk remediation

Architect and operationalize security solutions across cloud, data, and endpoint environments, leveraging zero-trust principles

Serve as a senior escalation point for major incidents, directing containment, recovery, and post-event reviews with a focus on continuous improvement

Guide the adoption of AI-driven threat analytics, secure DevOps practices, and automated response frameworks to strengthen Insmed’s security posture

Oversee penetration testing, red teaming, and risk assessments, ensuring timely follow-up and actionable outcomes

Stay actively engaged with emerging technologies and regulatory developments impacting healthcare cybersecurity

Deep understanding of GxP requirements, FDA 21 CFR Part 11, EU GMP Annex 11, and GAMP 5 guidelines a plus

Experience collaborating with Quality, IT, and business stakeholders to ensure systems are validated and remain in a compliant state throughout their lifecycle a plus

Familiarity with validation of documentation, audit readiness, and continuous improvement of CSV processes

Define and implement risk management policies and frameworks aligned with organizational objectives

Conduct enterprise-level risk assessments and develop mitigation strategies

Oversee the CSV team, validation strategy and continuous process improvement

Ensure compliance with GxP regulations and industry standards

Familiarity with validation of documentation, audit readiness, and continuous improvement of CSV processes a plus

Build, mentor, and inspire a high-performing cybersecurity organization, promoting continuous learning and professional growth

Lead through influence and collaboration, working closely with peers across IT, R&D, Quality, and Business Operations to embed security into all technology initiatives

Manage key vendor and service-provider partnerships, ensuring effective performance and alignment with Insmed’s security objectives

Drive operational excellence by balancing strategic priorities with hands-on execution and measurable results

Qualification

Cybersecurity operationsRisk managementComputer Systems ValidationRegulatory complianceCloud securityIncident responseThreat detectionVulnerability managementAI-driven threat analyticsLeadershipCommunication skillsCollaborationContinuous learning

Required

Minimum 15 years of progressive IT and cybersecurity experience, with at least 10 years in senior leadership roles managing enterprise-level programs

Demonstrated hands-on experience in cybersecurity operations, engineering, or architecture

Proven success communicating with and presenting to Executive Management and Boards of Directors

Strong understanding of risk management, compliance, and audit processes within regulated industries, ideally biotechnology or pharmaceuticals

Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or related discipline (advanced degree preferred)

Professional certifications such as CISSP, CISM, GIAC Security Leadership, CCSP (OSCP or other technical certifications a plus)

Define, communicate, and execute Insmed's cybersecurity and risk management vision, ensuring alignment with the company's values, business priorities, and regulatory commitments

Present cybersecurity posture, emerging threats, and key initiatives to the CIO, IT Leadership Team, and, as needed, the Executive Committee and Board of Directors

Establish and maintain governance frameworks and control structures consistent with NIST and FDA data protection standards

Partner with Legal, Compliance, Clinical Operations, Quality and R&D to proactively manage risk across Insmed's technology landscape and protect sensitive patient and research data

Foster a culture of security accountability and awareness, ensuring every employee understands their role in protecting Insmed's mission and assets

Lead and participate directly in cybersecurity operations, including incident response, threat detection, vulnerability management, and risk remediation

Architect and operationalize security solutions across cloud, data, and endpoint environments, leveraging zero-trust principles

Serve as a senior escalation point for major incidents, directing containment, recovery, and post-event reviews with a focus on continuous improvement

Guide the adoption of AI-driven threat analytics, secure DevOps practices, and automated response frameworks to strengthen Insmed's security posture