Responsibilities * Contribute to the development and execution of the global cybersecurity strategy aligned with ALS’s corporate objectives and international regulatory frameworks (GxP, ISO 27001, NIST, GDPR, 21 CFR Part 11). * Manage third‑party risk assessments for technology vendors, partners, and digital supply chain providers. * Lead global risk management initiatives, including threat assessment, vulnerability management, and mitigation plans for IT and OT environments. * Oversee security across hybrid infrastructures, including laboratory information systems (LIMS, ELN, CDS), cloud platforms, and industrial control systems (SCADA, PLCs). * Coordinate global incident response, ensuring timely communication, investigation, and remediation of security events. * Review current security policies in place across the laboratories of the group to assess current practice and local requirements. * Define corporate security policies and standards to support harmonisation and consistency of practice locally. * Partner with integral and regional teams to ensure compliance with corporate policies, GxP, data protection, and privacy regulations. * Lead security awareness and training programs tailored to scientific, technical, and operational personnel. * Collaborate with Quality, R&D;, Production,



and Legal to embed security by design into systems and processes. * Monitor and report cybersecurity KPIs and maturity metrics to Chief Information Security Officer executive committees. * Lead and coordinate responses to RFIs, security questionnaires, and due‑diligence requests regarding IT security and compliance. Requirements * Bachelor’s or Master’s degree in Computer Science, Information Security, Telecommunications, or a related field. * Advanced training or postgraduate studies in cybersecurity or technology risk management. * Recognized certifications such as CISM, CISSP, ISO 27001 Lead Implementer/Auditor, GICSP, NIST CSF Practitioner are highly valued. * Minimum 8 years of professional experience in cybersecurity, with 3–5 years in a leadership or global coordination role. * Proven experience in pharmaceutical, biotechnology, or scientific research environments. * Strong knowledge of regulated environments (GxP) and industrial/OT security (ISA/IEC 62443). * Experience managing security across cloud platforms (AWS, Azure, GCP) and hybrid infrastructures. * Demonstrated ability to manage complex, multinational security programs. #J-18808-Ljbffr

📌 Global Cybersecurity Lead – Pharmaceutical Division (Madrid)
🏢 Jobtailor
📍 Madrid