Sr Director, IT Head of Security Operations

Proven ability to build, develop, and lead teams and rally organization around the vision.

Key responsibilities for this position include (but are not limited to):

• Define and execute a multi-year Security Operations strategy and roadmap, aligning operational capabilities, automation, incident response, identity security, vulnerability management, application security and MSP performance to Gilead's enterprise risk posture, digital transformation and business strategies.
• Lead and manage the Security Operations function to provide operational excellence across all Security domains including Identity and Access Management, Endpoint Security, Network Security, Platform Security, and application security.
• Lead and manage the Security Identity and Access Management team to deliver key Identity Security capabilities.
• Lead and manage our Managed Service Provider (MSP) Operations team. Establish and monitor OKRs, KPIs, service levels and risk-reduction metrics.
• Own operational budget planning, vendor performance, service cost transparency and cost-of-ownership optimization for Security Operations. Make informed trade-off decisions across risk reduction, operational resilience, user experience, cost and business need.
• Lead continuous improvement and automation activities to reduce overall operational overhead, improve response times and strengthen cyber resilience.
• Represent Security Operations in enterprise governance, leadership risk discussions, audit and compliance forums, and major IT initiatives.
• Advise senior leaders on operational security risks, investment trade-offs and response priorities that affect Gilead-wide resilience. Leads a high-performing, inclusive Security Operations organization that develops and retains talent, encourages innovation and enables accountable, resilient and scalable delivery.
• Maintain awareness of evolving cyber threats, regulatory expectations, security operations practices and peer benchmarks, bringing relevant insights into Gilead to inform roadmap decisions and operational priorities.
• Support Merger & Acquisition related activities.
• Lead and manage our application security team, including SAST/DAST application testing, penetration testing, security remediation, and tabletop exercises
• Ensure IT activities, processes, and procedures meet defined requirements, policies and regulations.
• Work with Internal Audit, Project Managers, System Managers and Engineers - Track project findings, identify and resolve issues, analyze evidence, communicate with stakeholders, and facilitate the completion of cybersecurity related projects.
• Participate in other activities relating to information security or other functional areas as assigned.

Skills and Experience

• Bachelor of Science degree in management information systems, computer science, engineering or another IT-related major is required
• 14+ years of relevant experience or 12+ years with a master's or PhD
• Information security related certifications such as CISSP, CRISC, CCSP, GIAC, etc.
• A minimum of 8-10 years of leadership responsibilities.
• Strong understanding of a wide variety of cybersecurity technologies relating to the following security domains: Audit and Monitoring, Risk Response & Recovery, SIEM, vulnerability management, Cryptography, Data Communications, Computer Operations Security, Telecommunications & Network Security, Security Architecture & Models, cloud security, Multi-Factor Authentication, Passwordless Authentication, Digital Rights Management, PKI, Security for AI and AI for Security solutions.
• Strong understanding of NIST cyber security, and MITRE attack frameworks.
• Deep knowledge of IT Security and Privacy concepts and controls, and ability to develop security standards and guidelines based on best practices and industry standards.
• Able to lead teams through an incident from initial response, stakeholder communications and diagnosis to immediate and long-term remediation plans and activities.
• Knowledge of information security risk management frameworks and compliance practices.
• Knowledge of securing network technologies, client, and server operating systems.
• Strong knowledge of Secure Software Development Lifecycle (SDLC) processes and methodologies.
• Excellent interpersonal, communication, and presentation skills, including formal writing experience.
• Understanding of common security standards and healthcare related regulations and data privacy.
• Able to assess complex multi-location projects as well as identify and recommend appropriate corrective measures to resolve security and privacy related issues.
• Strong customer service orientation and the ability to project that attitude to customers in remote locations.
• Previous work experience in a Biopharma organization is a plus.
• Previous work experience in a cloud centric environment is a plus.

The salary range for this position is: $243,100.00 - $314,600.00. Gilead considers a variety of factors when determining base compensation, including experience, qualifications, and geographic location. These considerations mean actual compensation will vary. This position may also be eligible for a discretionary annual bonus, discretionary stock-based long-term incentives (eligibility may vary based on role), paid time off, and a benefits package. Benefits include company-sponsored medical, dental, vision, and life insurance plans*. For additional benefits information, visit: https://www.gilead.com/careers/compensation-benefits-and-wellbeing

• Eligible employees may participate in benefit plans, subject to the terms and conditions of the applicable plans.

For jobs in the United States: Gilead Sciences Inc. is committed to providing equal employment opportunities to all employees and applicants for employment, and is dedicated to fostering an inclusive work environment comprised of diverse perspectives, backgrounds, and experiences. Employment decisions regarding recruitment and selection will be made without discrimination based on race, color, religion, national origin, sex , age, sexual orientation, physical or mental disability, genetic information or characteristic, gender identity and expression, veteran status, or other non-job related characteristics or other prohibited grounds specified in applicable federal, state and local laws. In order to ensure reasonable accommodation for individuals protected by Section 503 of the Rehabilitation Act of 1973, the Vietnam Era Veterans' Readjustment Act of 1974, and Title I of the Americans with Disabilities Act of 1990, applicants who require accommodation in the job application process may contact ApplicantAccommodations@gilead.com for assistance.

For more information about equal employment opportunity protections, please view the 'Know Your Rights' poster.

NOTICE: EMPLOYEE POLYGRAPH PROTECTION ACT YOUR RIGHTS UNDER THE FAMILY AND MEDICAL LEAVE ACT

Gilead Sciences will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, (c) consistent with the legal duty to furnish information; or (d) otherwise protected by law.

Our environment respects individual differences and recognizes each employee as an integral member of our company. Our workforce reflects these values and celebrates the individuals who make up our growing team.

Gilead provides a work environment free of harassment and prohibited conduct. We promote and support individual differences and diversity of thoughts and opinion.

For Current Gilead Employees and Contractors: Please apply via the Internal Career Opportunities portal in Workday.