Sr. Director, Cyber Security
Senior security leadership role at Clarivate: define and run the enterprise cyber security strategy and program — security operations, incident response, vulnerability management, and GRC — protecting healthcare/life-sciences data in regulated environments. Centered on cloud security (AWS/Azure/GCP), enterprise security tooling, and frameworks like ISO 27001, NIST, and SOC 2.
- Compensation
- $188K–$235K / yr
- Location
- Philadelphia, United States
- Work setup
- Remote
- Seniority
- Senior
- Employment
- Full time
- Experience
- 5+ years
- Category
- Security
- Posted
Skills
Must have
- Bachelor's degree in Computer Science, IT, Cybersecurity, or related field, or equivalent relevant experience
- 12+ years of experience in cyber security within healthcare, life sciences, or other highly regulated environments
- 5+ years of experience leading cyber security teams, programs, or cross-functional security initiatives
- Familiarity with GxP, FDA regulations, 21 CFR Part 11, HIPAA, computerized system validation, and data integrity principles
- Experience defining and executing enterprise cyber security strategy, roadmaps, controls, and operating models
- Experience overseeing security operations, incident response, vulnerability management, threat monitoring, security engineering, or cyber risk management
- Working knowledge of security and compliance frameworks such as ISO 27001, SOC 2, NIST, CIS Controls, or similar standards
- Experience translating cyber risk, security metrics, and technical concepts into clear recommendations for senior leadership and business stakeholders
Nice to have
- Relevant security certification such as CISSP, CISM, CISA, CRISC, CCSP, or equivalent experience
- Experience in a global, matrixed organization with complex technology environments and regulated customer requirements
- Experience with cloud security across AWS, Azure, GCP, or hybrid cloud environments
- Experience with SIEM, EDR/XDR, IAM, DLP, vulnerability management, third-party risk, or other enterprise security technologies
- Experience supporting secure software development, product security, customer security assurance, or security-by-design programs
- Experience leading incident readiness, tabletop exercises, penetration testing, red team/blue team activities, or post-incident improvement programs
Full description
We are looking for a Senior Director, Cyber Security to join our Information Security team. This is an exciting opportunity to lead enterprise-wide cyber security strategy, strengthen security operations, and help protect Clarivate’s systems, products, data, and customers, including technology and data supporting healthcare, life sciences, and other regulated environments. In this role, you will partner closely with Technology, Product, Engineering, Enterprise Architecture, Privacy, Legal, Compliance, Quality, and business leaders to advance a risk-based security program, improve control maturity, and support the continued resilience of Clarivate’s Life Science business.
About You – experience, education, skills, and accomplishments
- Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field, or equivalent relevant experience.
- 12+ years of experience in cyber security within healthcare, life sciences, or other highly regulated environments.
- 5+ years of experience leading cyber security teams, programs, or cross-functional security initiatives.
- Familiarity with relevant healthcare and life sciences requirements and standards, including GxP, FDA regulations, 21 CFR Part 11, HIPAA, computerized system validation, and data integrity principles.
- Experience defining and executing enterprise cyber security strategy, roadmaps, controls, and operating models.
- Experience overseeing security operations, incident response, vulnerability management, threat monitoring, security engineering, or cyber risk management.
- Working knowledge of security and compliance frameworks such as ISO 27001, SOC 2, NIST, CIS Controls, or similar standards.
- Experience translating cyber risk, security metrics, and technical concepts into clear recommendations for senior leadership and business stakeholders.
It would be great if you also have . . .
- Relevant security certification such as CISSP, CISM, CISA, CRISC, CCSP, or equivalent experience.
- Experience in a global, matrixed organization with complex technology environments and regulated customer requirements.
- Experience with cloud security across AWS, Azure, GCP, or hybrid cloud environments.
- Experience with SIEM, EDR/XDR, IAM, DLP, vulnerability management, third-party risk, or other enterprise security technologies.
- Experience supporting secure software development, product security, customer security assurance, or security-by-design programs.
- Experience leading incident readiness, tabletop exercises, penetration testing, red team/blue team activities, or post-incident improvement programs.