Director-Cybersecurity,SecurebyDesign

## **Job Title: Director- Cybersecurity, Secure by Design** **GCL: F** **Introduction to role:** Are you ready to hardwire security into every design decision and release, so science can move faster with confidence? Can you lead global engineering teams to move from reactive fixes to design-led, measurable risk reduction? This senior technical leadership role anchors security in the full lifecycle of our digital ecosystem. You will translate a Trust-by-Design vision into practical engineering patterns that safeguard cloud platforms, software, AI/GenAI capabilities, operational technology, and enterprise applications. Your work will help ensure that the platforms powering discovery, development, and delivery of medicines are secure by default—so teams can innovate at speed without compromising integrity. You will partner across architecture, product engineering, and operations to embed security standards and automate controls at scale. By shaping guardrails and enabling secure development practices, you will reduce systemic risk, accelerate releases, and protect data that matters for patients and the business. ## ## Accountabilities: * Define and drive the engineering strategy aligned to CISA, NIST SSDF, ISO/IEC 27034, and EU CRA principles; establish a Secure Development Lifecycle across software, cloud, and OT, and convert the CISO’s vision into 18–24 month roadmaps with measurable outcomes. * Lead threat modelling, secure code reviews, penetration test coordination, and portfolio-wide vulnerability management; convert findings into prioritized remediation and control improvements that demonstrably reduce risk. * Direct engineering activities across complex software and application projects; design and implement secure-by-default configurations for cloud (IaaS/PaaS/SaaS), containers (Docker, Kubernetes), hybrid and on‑premise; oversee build, configuration, testing, and release of cybersecurity solutions with a focus on secure architecture, DevSecOps, and data secur