Associate Director, Information Security

Accountabilities:: Build, lead, and develop a global cybersecurity team, establishing operational objectives, responsibilities, performance expectations, and coverage across time zones. Define and manage the cybersecurity strategy and multi-year roadmap in alignment with business priorities, customer commitments, and regulatory requirements. Oversee cybersecurity budgets, resource planning, vendor relationships, contracts, and service-level agreements. Develop, maintain, and enforce enterprise-wide information security policies, standards, and procedures. Lead the information security risk management program, including risk assessments, risk acceptance, and exception management. Own security operations, including threat monitoring, detection, investigation, and incident response. Act as incident lead during major security events, directing containment, recovery, post-incident reviews, and communication with senior leadership, Legal teams, and affected customers. Establish security architecture standards across Microsoft Azure, Microsoft 365, Entra ID, network infrastructure, privileged access management, and Zero Trust environments. Guide the security technology portfolio, including endpoint detection and response, extended detection and response, cloud security, and email protection platforms. Oversee vulnerability and exposure management, defining risk-based remediation standards and ensuring timely resolution with system owners. Lead security compliance and assurance activities, including internal and external audits, customer security assessments, and third-party risk management. Partner with Quality, Legal, Privacy, and Compliance teams to address data protection, GxP, and clinical research security requirements. Drive security automation and responsible AI-assisted security initiatives, leveraging PowerShell, Microsoft Graph, and security platform APIs. Lead security awareness and training initiatives to promote a strong security-conscious culture. Report cybersecurity posture, key risks, program performance, and operational metrics to IT and executive leadership. Requirements: Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related discipline, or equivalent professional experience. 8–10 years of progressive cybersecurity experience, including at least 2 years in a professional management role leading cybersecurity teams. Proven experience in enterprise security operations, incident response, and cybersecurity program leadership within a global organization. Demonstrated ability to develop security strategies, policies, operational frameworks, and multi-year roadmaps. Strong hands-on expertise in Microsoft Azure, Microsoft 365, and Entra ID, including hybrid Active Directory, Conditional Access, MFA, Privileged Identity Management, and identity protection. Experience with enterprise EDR, XDR, SIEM, or managed detection and response platforms. Strong technical capabilities in log analysis, threat hunting, complex security investigations, and incident coordination. Practical knowledge of vulnerability management, Windows security, network segmentation, secure remote access, cloud security posture, and Zero Trust principles. Ability to use PowerShell, Microsoft Graph, and security platform APIs to automate workflows, integrate tools, and improve operational efficiency. Proven leadership experience in team development, budget management, vendor oversight, and prioritization across competing business demands. Excellent communication and stakeholder management skills, with the ability to explain complex security risks and influence technical and non-technical executive stakeholders. Nice to have: Cybersecurity leadership experience in pharmaceutical, biotechnology, clinical research, healthcare, or another regulated global industry. Familiarity with NIST Cybersecurity Framework (CSF), ISO/IEC 27001, SOC 2, GDPR, GxP, and 21 CFR Part 11. Experience with Microsoft Purview, Azure Policy, cloud security governance, security orchestration, or AI-assisted security operations. Relevant certifications such as CISSP, CISM, Microsoft Security, GIAC, CrowdStrike, or Palo Alto Networks certifications. Benefits: Fully remote working arrangement based in Pune, India. Full-time employment. Competitive total rewards package. Employee benefits and supportive workplace policies. Wellbeing initiatives designed to support employees and their families. Opportunities for professional growth, learning, and career development within a global organization. Opportunity to lead global cybersecurity initiatives and work with advanced security technologies.