Chief Information Security Officer & Chief Security Officer London

About Ipsen

Ipsen is a mid-sized global biopharmaceutical company with a focus on transformative medicines in three therapeutic areas: Oncology, Rare Disease and Neuroscience. Supported by nearly 100 years of development experience, with global hubs in the U.S., France and the U.K, we tackle areas of high unmet medical need through research and innovation. Our passionate teams in more than 40 countries are focused on what matters and endeavour every day to bring medicines to patients in 88 countries. We build a workplace that champions human‑centric leadership and fosters a culture of collaboration, excellence and impact. At Ipsen, every individual is empowered to be their true selves, grow and thrive alongside the company’s success. Join us on our journey towards sustainable growth, creating real impact on patients and society!

Job Description

The Chief Information Security Officer / Chief Security Officer (CISO / CSO) is accountable for security for Ipsen Group. The role holder leads the multidisciplinary Global Security team who cover all aspects of security: cyber, data, manufacturing, physical, anti‑counterfeit, travel and corporate investigations. Acting as a figurehead to the Executive, the CSO / CISO is responsible for building out proportionate and effective security controls with key teams (including IT, Real Estate and affiliates) and in line with corporate risk tolerance. A key aspect of the role is leading the detection and response of security incidents (in whatever form) globally and ensuring that Group business priorities can continue without the fear of security compromise. Leading the Global Security team means stretching and retaining a diverse and high performing team, managing budget priorities as well as acting as a figurehead within the General Counsel Leadership Team and broader Global Leadership Team.

Main Responsibilities & Technical Competencies

• Enterprise Security Strategy
• Enterprise security architecture and converged security strategy
• Security governance aligned to NIST CSF and related standards
• Enterprise risk assessment and cyber risk quantification
• Security maturity modelling and capability development
• Security investment prioritisation and program governance
• Physical Security and Global Security Programs
• Physical security systems including access control, CCTV, and intrusion detection
• Facility risk and vulnerability assessment methodologies
• Integration of physical security monitoring with enterprise security operations
• Security technology platforms and analytics
• Executive Protection
• Protective intelligence and threat assessment
• Executive risk management and secure travel planning
• Global Travel Protection
• Travel risk intelligence platforms and geopolitical monitoring
• Real‑time traveller tracking and emergency notification systems
• Crisis coordination and duty‑of‑care technologies
• Security Awareness and Human Risk
• Human risk management frameworks
• Phishing simulation and behavioural security analytics
• Enterprise security awareness platforms and program metrics
• People‑Centred Security Controls
• Insider threat detection and behavioural monitoring
• Data loss prevention and adaptive authentication technologies
• Product Security and Anti‑Counterfeit
• Product authentication technologies
• Supply chain security and monitoring frameworks
• Intelligence collection and analysis on illicit trade networks
• Investigative collaboration with regulatory and law enforcement agencies
• Corporate Investigations
• Investigation governance frameworks and case management systems
• Digital forensics and evidence handling standards
• Investigative analytics and intelligence reporting
• Development of a global Centre of Investigative Excellence
• Cyber Risk Identification
• Enterprise asset and data classification frameworks
• Threat modelling and attack surface management
• Third‑party and supply chain security risk assessment
• Regulatory and policy compliance management
• Protection and Resilience
• Identity and access management and privileged access controls
• Encryption, data protection, and information governance
• Security architecture across cloud, network, endpoint, and OT environments
• Detection, Response and Recovery
• Security Operations Centre (SOC) operations and SIEM platforms
• Threat intelligence and threat hunting capabilities
• Incident response frameworks and digital forensics
• Disaster recovery and cyber resilience planning
• Leadership and Governance
• Set strategic direction and oversee operational performance across all security domains
• Build and develop high‑performing multidisciplinary security teams
• Manage security investments, budgets, and resource allocation
• Support the Global Corporate Leadership Team (GCLT)
• Lead engagement with the Global Leadership Team (GLT), Executive Leadership Team (ELT), and Board Committees
• Act as the senior figurehead for security across the Group
• Enterprise security program management
• Security performance metrics and reporting
• Board‑level cyber risk communication and governance

Why work here?

At Ipsen, each employee makes a real impact. Our teams are passionate about what they do because they care about making a difference in patients’ lives. We invest in our employees to support life‑changing projects that create positive impact for patients and society.