Associate Director, Cybersecurity & IT
Sage Bionetworks · Remote
About this role
## About Sage Bionetworks Sage Bionetworks is a nonprofit biomedical research and technology organization that advances human health through open science and collaborative discovery. We work at the intersection of biomedical science, data, technology, and patient engagement—partnering across academia, industry, philanthropy, and government to build research programs, data resources, and technology that accelerate scientific progress. Sage brings particular expertise in collaborative research, multimodal biomedical data, responsible data governance, and open source technology. Our Synapse platform serves as a generalist research data repository and is trusted to responsibly steward research data at scale. ## The Opportunity Sage Bionetworks is seeking an **Associate Director, Cybersecurity & IT** to lead our cybersecurity program and enterprise IT function. This role sets Sage’s cybersecurity strategy and leads teams responsible for implementing and operating security controls, protecting Sage’s systems and data, identifying and remediating vulnerabilities, responding to security incidents, and providing reliable and secure technology services to employees. Sitting at the intersection of Sage’s research mission, technology platforms, and federal security obligations, this leader will bring deep cybersecurity engineering expertise alongside practical IT leadership. You’ll strengthen and scale security capabilities, translate security requirements into effective technical practices and controls, and lead the team responsible for employee technology, access, infrastructure, and IT services. This role works closely with Sage’s security compliance function. Compliance interprets security frameworks and requirements, coordinates assessments and audits, and organizes compliance evidence—while the cybersecurity team implements and operates security controls, maintains secure engineering and operational practices, addresses risks and vulnerabilities, and produces evidence demonstrating controls are operating effectively. > **Note:** Please do not upload your resume as your cover letter (required). ## Key Responsibilities ### Cybersecurity Leadership & Operations - Set and execute Sage’s cybersecurity strategy and roadmap based on organizational risk, the threat landscape, and applicable security requirements. - Lead the design, implementation, operation, and continuous improvement of technical and operational security controls across enterprise and technology environments. - Oversee security operations: monitoring, threat detection, vulnerability management, security testing, incident investigation/response, and remediation. - Establish security engineering and operational practices that reduce risk through secure configuration, automation, monitoring, testing, and repeatable processes. - Ensure vulnerabilities and security findings are triaged, assigned, tracked, and remediated according to risk-based timelines. - Lead incident-response capabilities: preparation, detection, investigation, containment, remediation, recovery, and post-incident improvement. - Partner with product and engineering teams to identify security risks and incorporate appropriate controls into platforms, infrastructure, and software-development processes. - Author and maintain technical security standards, procedures, documentation, and operational evidence demonstrating controls are implemented and operating effectively. - Partner with security compliance to transla
Listing freshness
CronJobs last confirmed this listing 2h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.