Director, Cybersecurity Risk Operations & BISO

At Insmed, every moment and every patient counts — and so does every person who joins in. As a global biopharmaceutical company dedicated to transforming the lives of patients with serious and rare diseases, you’ll be part of a community that prioritizes the human experience, celebrates curiosity, and values every person’s contributions to meaningful progress. That commitment has earned us recognition as Science magazine’s No. 1 Top Employer for five consecutive years, certification as a Great Place to Work® in the U.S., and a place on The Sunday Times Best Places to Work list in the UK.

For patients, for each other, and for the future of science, we’re in. Are you?

About the Role:

The Director, Cyber Risk Operations & BISO will be responsible for building and maintaining capabilities to track and report cybersecurity risks across the company. Working with other BISO’s and Risk Leads, your responsibilities will include governance of cybersecurity standards, continuous control compliance monitoring, identification and evaluation of cybersecurity risk, and reporting of cybersecurity risks and initiatives to executive leadership. As a BISO, you will act as the primary cybersecurity advisor and point of contact for assigned business unit stakeholders and their corresponding IT Business Partners.

You will be responsible for understanding the cybersecurity strategy and objectives and engaging various teams across the organization to drive action to meet those objectives.   The successful candidate will possess a blend of general technology, security, and audit competencies with an emphasis on critical thinking, data analytics, and a desire to drive efforts to their conclusion as needed. Proficiency in establishing AI enabled capabilities is highly desired.

What You'll Do:

In this role, you’ll have the opportunity to enhance, maintain, and champion engagement with the business and the Technology organization to monitor and manage visibility to key security risks and status of remediation. 

You’ll also:

 

• Strategic Partnership: Act as the primary security advisor and point of contact for assigned Insmed business unit leaders (e.g., Commercial, R&D, or Global Product Development) and IT to align cybersecurity with business objectives.
• Risk Management & Governance: Identify, evaluate, and communicate information security risks specific to the business unit's applications, data, and third-party vendors.
• Security Embedded by Design: Partner with IT and project management teams to ensure security and privacy controls are built into technology projects and product lifecycles from day one.
• Incident Liaison: Provide local business-unit context and serve as an escalation path during cybersecurity incidents, threat assessments, or vulnerability remediations.
• Direct routine, ongoing processes to formalize, track, and report security risks across varying levels of stakeholders, including risk owners and executive leadership. 
• Establish and execute strategy for formalization and routine governance of security standards, leveraging automation and Artificial Intelligence to create efficiency . 
• Collaborate with other leaders to establish success criteria and metrics for reporting compliance with key security controls. 
• Create routine and ad-hoc presentations for executive leadership to ensure awareness and alignment on security risks and initiatives and support key security decisions. 
• Perform project management and change management duties, as assigned.  

Who You Are:

You have a minimum of a Bachelor's degree in Computer Science, Information Technology, Engineering, or a related field as well as a minimum of 10 years of experience working in information security controls, information technology audit, or security risk management. 

You are or also have:

 

• At least 5 years of experience, including coaching, consensus building, and ability to effectively manage resources to address competing priorities. 
• Demonstrated experience creating executive level presentations. 
• Experience escalating risk issues to senior technology or company leadership. 
• Ability to manage across functional teams to achieve desired business results. 
• Ability to translate a business agenda into technology terms and vice versa. 
• Excellent interpersonal, written, and verbal communications skills. 
• Strong understanding and experience with information security technologies. 
• Ability to adjust to multiple demands, changing priorities, ambiguity, and rapid change, while multitasking effectively. 

 

Nice to have (but not a must): 

• Professional services/Big Four consulting background.   Fortune 500 company experience. 
• Pharmaceutical/Healthcare industry experience. 
• At least one relevant industry certification – CISSP, CISM, CRISC, CISA. 

Where You’ll Work  

This is a hybrid role based out of our Bridgewater, NJ office. You’ll have the option to work remotely, with in-person collaboration 1-2 days a week when it matters the most.  

 

#LI-hybrid

#LI-EG1

Pay Range:

$185,000.00-252,500.00 Annual

Life at Insmed
 

At Insmed, you’ll find a culture as human as our mission—intentionally designed for the people behind it. You deserve a workplace that reflects the same care you bring to your work each day, with support for how you work, how you grow, and how you show up for patients, your team, and yourself.

Highlights of our U.S. offerings include:

• Comprehensive medical, dental, and vision coverage and mental health support, annual wellbeing reimbursement, and access to our Employee Assistance Program (EAP)

• Generous paid time off policies, fertility and family-forming benefits, caregiver support, and flexible work schedules with purposeful in-person collaboration

• 401(k) plan with a competitive company match, annual equity awards, and participation in our Employee Stock Purchase Plan (ESPP), and company-paid life and disability insurance

• Company Learning Institute providing access to LinkedIn Learning, skill building workshops, leadership programs, mentorship connections, and networking opportunities

• Employee resource groups, service and recognition programs, and meaningful opportunities to connect, volunteer, and give back

Eligibility for specific programs may vary and is subject to the terms and conditions of each plan. 

Current Insmed Employees: Please apply via the Jobs Hub in Workday.

Insmed Incorporated is an Equal Opportunity employer. We do not discriminate in hiring on the basis of physical or mental disability, protected veteran status, or any other characteristic protected by federal, state, or local law. All qualified applicants will receive consideration for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected Veteran status, age, or any other characteristic protected by law. For more information, please refer to our Equal Employment Opportunity and Non-Discrimination Statement on our Careers site.

It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.

Unsolicited resumes from agencies should not be forwarded to Insmed. Insmed will not be responsible for any fees arising from the use of resumes through this source. Insmed will only pay a fee to agencies if a formal agreement between Insmed and the agency has been established. The Human Resources department is responsible for all recruitment activities; please contact us directly to be considered for a formal agreement.

Insmed is committed to providing access, equal opportunity, and reasonable accommodation for individuals with disabilities in employment, its services, programs, and activities. To request reasonable accommodation to participate in the job application   or interview process, please contact us by email at TotalRewards@insmed.com  and let us know the nature of your request and your contact information. Requests for accommodation will be considered on a case-by-case basis. Please note that only inquiries concerning a request for reasonable accommodation will be responded to from this email address.

Applications are accepted for 5 calendar days from the date posted or until the position is filled.