Vp, Chief Information Security Officer

At Advarra, we are passionate about making a difference in the world of clinical research and advancing human health. With a rich history rooted in ethical review services combined with innovative technology solutions and deep industry expertise, we are at the forefront of industry change. A market leader and pioneer, Advarra breaks the silos that impede clinical research, aligning patients, sites, sponsors, and CROs in a connected ecosystem to accelerate trials.

Company Culture

Our employees are the heart of Advarra. They are the key to our success and the driving force behind our mission and vision. Our values (Patient-Centric, Ethical, Quality Focused, Collaborative) guide our actions and decisions. Knowing the impact of our work on trial participants and patients, we act with urgency and purpose to advance clinical research so that people can live happier, healthier lives.

At Advarra, we seek to foster an inclusive and collaborative environment where everyone is treated with respect and diverse perspectives are embraced. Treating one another, our clients, and clinical trial participants with empathy and care are key tenets of our culture at Advarra; we are committed to creating a workplace where each employee is not only valued but empowered to thrive and make a meaningful impact.

Job Overview Summary

Reporting to the General Counsel, the inaugural Chief Information Security Officer is a visionary leader who is responsible for establishing the Information Security strategy and directing the implementation and monitoring of services, policies, standards, and solutions for Advarra. The CISO is both an experienced leader and a subject matter expert who will address cyber security from a strategic lens and provide guidance to leadership for managing risks to Information Security and cyber crisis management.

Job Duties & Responsibilities

• Develop and maintain a comprehensive enterprise cybersecurity vision, strategy, framework and roadmap that enables consistent, effective security practices which minimize risk and ensure the integrity, confidentiality and availability of information that is owned, controlled, and processed within the organization.
• Effectively champion and lead the development of an enterprise security awareness culture aimed at driving behavioral changes for the business
• Establishes short and long term security goals, defines security strategies and metrics as well as predictive insights and reporting mechanisms for continual program improvements.
• Monitor regulatory compliance with enterprise security policies and educate business unit leaders and service managers on compliance efforts.
• Consults with all departments on security related issues, inquiries, and projects.
• Directs the investigation of cyber security incidents and serves as main point of contact for communications to executive leadership and the Board of Directors.
• Direct and perform audits to ensure environments and systems meet expected levels of policy compliance and security standards

Location

This role is open to candidates working remotely in the United States, preference will be given to candidates located near Advarra’s Boston, MA and Columbia, MD locations.

Basic Qualifications

• Bachelor’s degree in computer science, cybersecurity, information technology or systems, or an equivalent combination or education and experience.
• 15+ years of experience in enterprise cybersecurity successfully executing on multiple programs in complex technical and organizational environments and possessing a deep understanding of cybersecurity concepts, threat landscape, risk management, and cloud technologies, preferably within a multi-national company.
• Proven experience building strategy and energizing team members to execute on a vision.
• CISSP, CISM, SSCP, GCIH or other industry standard certifications and credentials

Preferred Qualifications

• Demonstrated experience using the latest privacy management and cyber protection tools, including current platforms in advanced cyber threat, malware, vulnerability, security event and incident, and intelligence management.
• Knowledge of security frameworks such as CIS Top 20, OWASP, ISO 27001/2/3 etc.
• Full understanding of risk management and organizational governance approaches, with a proven ability to apply these concepts to the business.
• Experience managing large, complex and high-visibility projects.
• Expert people leadership skills with the ability to work effectively at all levels of the organization
• Strong decision-making capabilities, with a proven ability to weigh the relative costs and benefits of potential actions and identify the most appropriate one
• A proven ability at presenting to both executive and technical level audiences, including the Board of Directors

Physical and Mental Requirements

• Sit or stand for extended periods of time at stationary workstation
• Regularly carry, raise, and lower objects of up to 10 Lbs.
• Learn and comprehend basic instructions
• Focus and attention to tasks and responsibilities
• Verbal communication; listening and understanding, responding, and speaking

US Equal Employer Opportunity (EEO) Statement

Advarra is an equal opportunity employer that is committed to diversity, equity and inclusion and providing a workplace that is free from discrimination and harassment of any kind based on race, color, religion, creed, sex (including pregnancy, childbirth, and related medical conditions, sexual orientation, and gender identity), national origin, age, disability or genetic information or any other status or characteristic protected by federal, state, or local law. Advarra provides equal employment opportunity to all individuals regardless of these protected characteristics. Further, Advarra takes affirmative action to ensure that applicants and employees are treated without regard to any of these protected characteristics in all terms and conditions of employment, including, but not limited to, hiring, training, promotion, discipline, compensation, benefits, and separation from employment.

Pay Transparency Statement

The base salary range for this role is $185,500 - $315,500. Note that salary may vary based on location, skills, and experience and may vary from the amounts listed above. This position may also be eligible for a variable bonus in addition to base salary as well as health coverage, paid holidays, and other benefits.

#LI-KA1

Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities

The contractor will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the contractor’s legal duty to furnish information. 41 CFR 60-1.35(c)