Director, Information Security

If you are interested in the below position, please send your resume  and REFERENCE THE POSITION TITLE within the subject line.

TG Therapeutics is a fully integrated, commercial stage, biotechnology company focused on the acquisition, development and commercialization of novel treatments for B-cell diseases. In addition to a research pipeline including several investigational medicines, TG has received U.S. Food and Drug Administration (FDA) approval for BRIUMVI® (ublituximab-xiiy), for the treatment of adult patients with relapsing forms of multiple sclerosis (RMS), to include clinically isolated syndrome, relapsing‑remitting disease, and active secondary progressive disease, as well as approval by the European Commission (EC) and the Medicines and Healthcare Products Regulatory Agency (MHRA) for BRIUMVI to treat adult patients with RMS who have active disease defined by clinical or imaging features in Europe and the United Kingdom, respectively.

TG Therapeutics is headquartered in Morrisville, North Carolina. For more information, visit

The Director of Information Security reports directly to the Head of Information Technology. This position is a “hands‑on” role, responsible for establishing and administering the overall strategies, goals, policies, procedures, and IT risk management program for the information security function. Develops and implements information security and disaster recovery programs in accordance with organizational information security standards. This role evaluates information risk on a regular time schedule and promotes information security awareness within the organization.

The ideal candidate will possess excellent communication skills and information security experience. The Director of Information Security will provide the vision and leadership necessary to manage the organization’s risk and ensure business alignment, effective governance, system and product availability, integrity, and confidentiality.

• Strategic Leadership
• Ensures accomplishment of all objectives in accordance with company security strategy, policies, procedures, and regulatory standards governing the company.
• Provide strategic direction and guidance to the information security team, aligning security initiatives with business objectives and risk tolerance.
• Ensure compliance with relevant laws, regulations, and industry standards (e.g., GxP, SOX, GDPR, HIPAA, ISO 27001, NIST).
• Security Governance and Policy
• Establish and maintain the organization’s information security policies, standards, and procedures, including governance for Artificial Intelligence (AI) and Generative AI technologies.
• Develop and oversee effective disaster recovery policies and standards to align with company business continuity management program goals.
• Lead the identification, assessment, and prioritization of information security risks, threats, and vulnerabilities across the organization’s IT infrastructure, systems, and AI-enabled technologies.
• Develop risk mitigation strategies and controls to address identified risks effectively.
• Conduct regular security reviews and audits to ensure adherence to policies.
• Lead the identification, assessment, and prioritization of information security risks, threats, and vulnerabilities across the organization’s IT infrastructure and systems.
• Evaluate potential security breaches, coordinate response, and recommend corrective actions.
• Develop and Implement risk mitigation strategies and controls to address identified risks effectively and ensure business-critical services are recovered in the event of disasters or other incidents.
• Provide direction, support, and in‑house consulting in these areas.
• Develop capabilities to manage third‑party cybersecurity risks.
• Conduct vulnerability assessments and penetration testing to identify weaknesses.
• Threat Management (Incident Response and Crisis Management)
• Execute strategies for continuously monitoring network traffic, system logs, and user activities to identify unauthorized or suspicious behavior.
• Review security monitoring tools and technologies to detect and alert potential security incidents and anomalies.
• M…