Assoc Director, IT Architecture

b Overview /b p As Associate Director in SRC, you’ll shape secure IT architectures that enable business goals across Gilead. You’ll partner with Security, Risk, Legal and IT teams to ensure programs meet policy, risk, and regulatory requirements. You’ll translate strategy into multi-year security roadmaps and drive end-to-end lifecycle execution. This role offers impact across global initiatives and a chance to influence security standards for life-changing therapies. /p b Pay / Benefits /b ul li flexible working policy /li li two days remote, three days onsite /li /ul b Responsibilities /b ul li Align security architecture with business and IT strategy to support enterprise objectives /li li Translate business context into technical architectures, security strategies, and roadmaps /li li Lead requirements gathering and traceability for strategic initiatives /li li Represent SRC in cross-functional program forums to ensure alignment across architecture, development, and delivery /li li Collaborate with development, testing, and operations teams throughout the solution lifecycle /li li liaise with Legal, Compliance and Procurement to ensure regulatory alignment /li li Research emerging security technologies and industry trends to drive continuous improvement /li li Assess current environments to identify risks and pragmatic remediation opportunities /li li Lead evaluation and standardization of security technologies and implementation patterns /li li Support audits, penetration testing, vulnerability assessments, and risk mitigation actions /li li Develop and maintain security policies, procedures, and technical standards /li /ul b Key requirements /b ul li Strong track record designing secure architectures for complex solutions /li li Solid understanding of Cloud Architectures (SaaS, PaaS, IaaS) and secure cloud considerations /li li Experience in large, global enterprises with complex geographic topologies /li li Knowledge of ITIL processes (incident, problem, change, release management) /li li Broad security domain expertise (governance, risk, audit, monitoring, cryptography, data protection, network security, vulnerability management, incident response) /li li Experience aligning solutions with regulatory requirements (Legal, Compliance, Procurement) /li li Knowledge of IS/Privacy Frameworks (ISO 2700x, NIST 800-53, COBIT, HITRUST, HIPAA, PCI, SSAE16, Safe Harbor) /li li Ability to translate strategy into roadmaps and drive end-to-end lifecycle execution /li li Strong communication and leadership skills /li /ul ul li interpersonal skills /li li facilitation and negotiation /li li ability to influence at all levels /li li Cloud Architectures (SaaS, PaaS, IaaS) /li li ITIL processes /li li Governance, risk management, audit and monitoring /li /ul