Lead Security, Risk, and Compliance Specialist

California, US residents .The job details are as follows:

Who We Are We are the first publicly-traded biotech or pharmaceutical company to take the form of a public benefit corporation. Our public benefit purpose is to provide a brighter future for patients through the development of novel pharmaceutical therapies; and technologies that expand the availability of transplantable organs.

United Therapeutics (Nasdaq: UTHR) seeks to travel down the corridors of indifference to develop treatments for rare, deadly diseases. We were founded in 1996 by a family seeking a cure for their daughter’s pulmonary arterial hypertension (PAH). Today, we have six FDA-approved therapies that treat PAH, pulmonary hypertension associated with interstitial lung disease (PH-ILD) and neuroblastoma, a rare pediatric cancer. Our near-term pipeline seeks to develop additional therapies for PAH and pulmonary fibrosis (PF).The

cure for end-stage life-threatening diseases like PAH, PH-ILD, PF, and many others is an organ transplant, but only a small percentage of donated organs are available to address the vast need. For this reason, we are working to create manufactured organs to address the shortage of kidneys, hearts, lungs, and livers available for transplant. We believe an unlimited supply of tolerable, transplantable organs will eliminate the transplant waiting list and cure end-stage organ diseases for which transplant is not currently an option.

Who you areThis role partners with senior management to safeguard intellectual property, protect critical manufacturing systems, ensure compliance with FDA regulations, and strengthen the cyber defense posture. The Lead Security, Risk and Compliance Specialist leads cross functional security initiatives and assists with representing the cybersecurity function with internal and external stakeholders.

Support senior management in developing and executing the global cybersecurity strategy aligned to business, compliance, and manufacturing priorities

Serve as the operational lead for enterprise security governance, risk management, and compliance programs across multiple regions and regulatory environments

Drive adoption of security frameworks such as NIST CSF, NIST AI RMF, 21 CFR Part 11 and other industry specific requirements in alignment with organizational culture and risk appetite

Partner with senior management to oversee outsourced MDR Security Operations Center (SOC), threat intelligence, incident response, investigations, security architecture and maintain cybersecurity regulatory/legal requirements

Oversee development of advanced defense capabilities including zero trust architecture, identity security, and endpoint/OT protection

Ensure successful delivery of security programs such as Identity and Access Management, Vulnerability Management and Cloud Security Partner with senior management to manage delivery of the IT Risk Management program. Direct IT risk assessments, manage IT risk register, supplier security evaluations, penetration testing and assist with audits across operations

Partner with Legal, Privacy, Compliance, Information Technology, other key stake holders to ensure adherence to IT security and regulatory requirements

Ensure AI risks are incorporated into the IT risk management program and are managed in accordance with the organization’s risk appetite and culture

Collaborate with OT and other key business leaders to embed security into product design, avionics systems, and industrial control systems

Operationalize security programs for manufacturing, research and development, IoT and other life sciences technologies

Ensure secure integration of IT/OT systems, ensure required availability and protection of proprietary intellectual property

Mentor and develop technical teams

All other duties as required

Minimum Requirements Bachelor’s Degree in cybersecurity, computer science, or related field8+ years of progressive experience in cybersecurity, including leadership roles in biotechnology/pharmaceutical organizations

CISSP Certified Information Systems Security Professional Progressive experience in cybersecurity, including leadership roles in…