Overview
In this role you will shape and oversee security architecture for Gilead’s global IT landscape, ensuring alignment with security standards and regulatory requirements. You will collaborate across IT, legal, and compliance to translate business needs into robust, compliant technical designs. You’ll drive end-to-end security initiatives, including risk assessment, policy development, and technology standardization, while supporting audits and incident investigations. This position offers cross-functional impact and the chance to influence security at scale within a mission-driven biopharma environment.
Pay / Benefits
- flexible working policy
- remote work (two days remote)
- on-site collaboration
- focus on cross-functional impact
Responsibilities
- Align security architecture with enterprise strategy and objectives
- Translate business needs into technical security roadmaps and architectures
- Lead requirements gathering and traceability for strategic initiatives
- Represent SRC in cross-functional program forums to ensure alignment
- Support end-to-end solution lifecycle with security and procurement capabilities
- Liaise with Legal, Compliance, and Procurement to meet regulatory obligations
- Research emerging security technologies and industry trends
- Identify gaps and risks in the current environment and propose pragmatic solutions
- Lead evaluation and standardization of security technologies and implementation patterns
- Provide architectural guidance during security incidents and investigations
- Support audits, penetration testing, and vulnerability assessments
- Develop and maintain security policies, procedures, and technical standards
Key requirements
- Strong track record designing secure architectures for complex solutions
- Solid understanding of Cloud Architectures (SaaS, PaaS, IaaS) and secure cloud considerations
- Experience in large global enterprises with multi-geography topologies
- Working knowledge of ITIL processes (incident, problem, change, release)
- Broad security domain knowledge: governance, risk management, audit, cryptography, data protection, network security, vulnerability management, incident response
- Experience aligning technical solutions with regulatory and compliance requirements (Legal, Compliance, Procurement)
- Knowledge of IS and Privacy Frameworks/standards: SSAE16 II, Safe Harbor, ISO/IEC 2700x, NIST 800-53, COBIT, HITRUST, HIPAA, PCI
- Ability to translate business strategy and risk posture into actionable roadmaps
- Strong communication and leadership skills across management and technical staff
- Bachelor’s degree in IT-related field; 10+ years in IT security, privacy, risk management; information security certifications (e.g., CISSP)
- Interpersonal effectiveness
- Facilitation and negotiation
- Strong written and verbal communication
- Security architecture design
- Cloud security (SaaS/PaaS/IaaS)
- ITIL processes
Assoc Director, IT Architecture in London employer: GILEAD Sciences
Gilead is an exceptional employer dedicated to creating a healthier world, where every employee plays a vital role in pioneering life-changing therapies. Located in Uxbridge, our collaborative work culture fosters inclusion and empowerment, providing ample opportunities for professional growth and development. With a strong focus on leadership and continuous improvement, Gilead offers a unique environment that encourages innovation and meaningful contributions to global health challenges.
