[Hiring] Associate Director, Cybersecurity & IT @Sage Bionetworks

Role Description

Sage Bionetworks is seeking an Associate Director, Cybersecurity & IT to lead our cybersecurity program and enterprise IT function. This role sets Sage’s cybersecurity strategy and leads the teams responsible for:

• Implementing and operating security controls
• Protecting Sage’s systems and data
• Identifying and remediating vulnerabilities
• Responding to security incidents
• Providing reliable and secure technology services to our employees

This leader will bring deep cybersecurity engineering expertise alongside practical IT leadership, strengthening and scaling our security capabilities, translating security requirements into effective technical practices and controls.

Qualifications

• Bachelor’s degree in computer science, information security, or a related field, or equivalent professional experience
• 8+ years of progressive experience in cybersecurity, security engineering, security operations, infrastructure security, or related disciplines
• Demonstrated experience leading teams responsible for implementing and operating security controls in production technology environments
• Strong working knowledge of security frameworks and standards such as NIST SP 800-53, NIST Cybersecurity Framework, FISMA/RMF, FedRAMP
• Experience with core cybersecurity disciplines such as vulnerability management, security monitoring and detection, incident response, identity and access management, endpoint security, cloud security, and security testing
• Experience establishing repeatable processes for identifying, prioritizing, tracking, and remediating security vulnerabilities and findings
• Experience responding to and investigating cybersecurity incidents
• Demonstrated ability to communicate cybersecurity risk and technical trade-offs to non-technical executives and a Board
• Experience leading IT operations at an organization of comparable size and complexity
• Experience operating effectively in a lean, mission-driven nonprofit, research, or similarly complex environment

Requirements

• Experience implementing and operating security controls in an environment subject to FISMA, FedRAMP, or other federal security requirements
• Experience shaping security compliance strategy, including supporting an organization through FISMA/RMF, ATO, or FedRAMP authorization
• Experience securing cloud-native platforms, research data environments, or biomedical data repositories
• Experience establishing security engineering practices within software-development and cloud-infrastructure teams
• CISSP, CISM, or other cybersecurity-focused certification; GRC-oriented certifications such as CGRC or CISA are a plus

Benefits

• Comprehensive medical, dental, vision, life, AD&D, and long-term disability
• Robust retirement plan and flexible spending accounts (FSA)
• Paid time off and flexible work arrangements

Company Description

Sage Bionetworks is a nonprofit biomedical research and technology organization that advances human health through open science and collaborative discovery. We work at the intersection of biomedical science, data, technology, and patient engagement.

Our Synapse platform serves as a generalist research data repository and is trusted to responsibly steward research data at scale.