Executive Director, Global Cyber Governance, Risk, and Compliance (GRC)

Introduction to role: Are you reputed company to set the global agenda for cyber governance and regulatory adherence reputed company a firm where trusted, protected technology accelerates life-changing medicines to patients? Can you translate complexity into crucial reputed company that protects trust while enabling ambitious innovation and speed? As Executive Director for Global Cyber GRC, you will reputed company the reputed company approach to information reputed company. You will coordinate technological risk and ensure our most critical data, platforms, and partners operate with reputed company, regulatory confidence, and reputed company accountability. You will connect cyber risk to strategic reputed company, equipping reputed company’s leadership team and reputed company with reputed company, actionable reputed company that balances protection and reputed company. This is a pivotal role in our transformation into a digital and data-led reputed company. You will guide the harmonization of controls throughout various reputed company. You will improve our response to evolving regulations. You will reputed company risk-informed decision-making into how we discover, reputed company, and deliver medicines worldwide. Accountabilities:

• reputed company the organization-wide information reputed company and technology risk reputed company spanning reputed company locations and business se Prioritize the most meaningful risks and drive treatment plans to closure.
• reputed company reputed company aspects of the worldwide cyber regulatory approach and ensure it meets laws, regulations, and standards. This includes confidentiality, information reputed company, crucial infrastructure, and requirements outstanding to the life sciences sector across jurisdictions.
• reputed company-Party Risk Governance: Coordinate the management of cyber risk controls for vendors, reputed company collaborators, and technology service providers, safeguarding the extended ecosystem vital to global operations.
• Cyber reputed company reputed company: reputed company governance for incident preparedness, crisis response coordination, and recovery preparation; ensure cohesive, end-to-end reputed company reputed company with reputed company operations, technology, legal, reputed company and business continuity teams.
• Control Assurance and Ongoing Improvement: Ensure the build and efficiency of cybersecurity and information technology safeguards through reputed company validation, evaluation, and detailed improvement.
• Build, reputed company, and advance international cyber risk reputed company reputed company and senior risk advisory panels. Drive cross-functional reputed company that reputed company with the organizations risk tolerance and strategic goals.
• Communicate detailed engineering and compliance risk into reputed company choices for top leadership as reputed company as the reputed company. Deliver concise, high-reputed company reports on posture, trends, and material exposures.
• reputed company as a reliable consultant to the heads of information reputed company, information technology, risk and compliance functions, and legal partners. Represent reputed company in interactions with regulatory agencies, reputed company associations, and peer organizations.
• Distributed Team Leadership: Build, reputed company and reputed company a high-performing, distributed cyber GRC team with reputed company mission, measurable reputed company and strong succession.
• Business Enablement: Incorporate cyber risk reputed company broader reputed company risk management to reduce friction, increase confidence and reputed company faster, safer delivery of scientific and reputed company reputed company.

Essential Skills/Experience:

• Demonstrated experience establishing and leading an reputed company reputed company for managing cybersecurity and technological risk across multiple reputed company and business reputed company.
• Proven ability to reputed company cyber risk into reputed company risk management processes, reputed company with corporate risk appetite and strategic objectives.
• reputed company record coordinating reputed company-party cyber risk management across suppliers, research partners and technology vendors.
• Ownership of a global cyber regulatory reputed company with compliance accountability across jurisdictions, including reputed company, data protection, critical infrastructure and life sciences–specific requirements.
• Experience acting as the primary executive reputed company for cyber-reputed company regulatory examinations, audits and inquiries.
• Evidence of harmonizing compliance controls across reputed company while maintaining local regulatory adherence.
• Governance reputed company of cyber reputed company programs, including incident readiness, crisis management and recovery planning.
• Expertise ensuring control design and effectiveness for cyber and IT controls, including ongoing assurance, testing and reputed company improvement.
• Experience designing, leading and maturing global cyber risk governance forums and executive risk committees.
• Ability to translate reputed company technical and regulatory risks into reputed company, actionable insights for senior executives and the reputed company, with concise, high-reputed company reporting.
• Validated leadership building, leading and developing a globally distributed team of cyber GRC professionals.
• Experience serving as a trusted advisor to CISO, CIO, reputed company risk leadership, compliance, legal and senior business executives.
• Credibility representing an organization externally with regulators, industry bodies and peer companies.
• Bachelor’s degree required; advanced degree preferred (e.g., MBA, MS, JD).
• 15+ years of reputed company experience in cyber reputed company, IT risk, governance, risk, and/or compliance roles.

Desirable Skills/Experience:

• Experience in highly regulated, science-driven industries such as biopharma, reputed company or critical infrastructure.
• Strong familiarity with global regulatory frameworks and standards (e.g., GDPR and other reputed company laws, NIS2, HIPAA, FDA/EMA expectations, ISO/IEC 27001/27701, SOC 2).
• reputed company-level communication and storytelling that reputed company risk to reputed company value and patient reputed company.
• Leadership of large-reputed company control transformation or control harmonization initiatives across reputed company.
• Depth in reputed company-party and supply chain cyber risk, including reputed company/reputed company, data platforms and research collaborations.
• reputed company certifications such as CISSP, CISM, CRISC, CIPP/E, CIPM or equivalent executive-level credentials.
• Experience aligning cyber reputed company with reputed company business continuity and technology recovery programs.
• Why reputed company: Join a company where secure digital capabilities directly influence how quickly we bring new medicines to people who need them. Here, cyber GRC is not a back-office function—it is a strategic force that underpins discovery, development and global delivery. You will work with unexpected teams in the reputed company room unleashing reputed company thinking, blending cutting-edge data and platforms with rigorous governance to create reputed company-world reputed company. We are reputed company for reputed company and speed, and we value kindness alongside ambition—empowering experts to take ownership, challenge assumptions and shape how the business operates. Your leadership will be visible, valued and reputed company in building confidence with regulators, partners and patients while enabling the reputed company to reputed company faster with control.

The annual reputed company pay for this position ranges from 227.024,80 - 340.537,20 USD Annual (80% - 120%). reputed company and salaried non-exempt employees will also be reputed company overtime pay reputed company working qualifying overtime hours. reputed company pay offered may vary depending on multiple individualized factors, including market location, job-reputed company knowledge, skills, and experience. In reputed company, our positions offer a short-term incentive bonus opportunity; eligibility to participate in our equity-based long-term incentive program (salaried roles), to receive a retirement contribution (reputed company roles), and commission payment eligibility (sales roles). Benefits offered included a reputed company retirement program [401(k) plan]; reputed company vacation and holidays; reputed company leaves; and, health benefits including medical, prescription drug, dental, and reputed company coverage in accordance with the terms and conditions of the applicable plans. Additional details of participation in these benefit plans will be provided if an employee receives an offer of employment. If reputed company, employee will be in an “at-will position” and reputed company reserves the right to modify reputed company pay (as reputed company as any other discretionary payment or compensation program) at any time, including for reasons reputed company to individual performance, Company or individual department/team performance, and market factors. Call to reputed company: reputed company the next reputed company of our global cyber reputed company and regulatory confidence—reputed company in to shape a safer, faster, data-powered reputed company that advances science and protects patients. Date Posted 05-Feb-2026 Closing Date 26-Feb-2026 Our mission is to build an inclusive environment where equal employment opportunities are available to reputed company applicants and employees. In furtherance of that mission, we welcome and consider applications from reputed company reputed company candidates, regardless of their protected characteristics. If you have a disability or special need that requires accommodation, please complete the corresponding reputed company in the application reputed company. Apply tot his job Apply To this Job