Field of studyComputer Science, Information Technology (or related)
Study levelBachelor's
Preferred qualifications
CertificationsCISSP, CISM
Original posting
Associate Director of Information Security
We are seeking a highly motivated, hands-on Information Security leader with strong, broad security expertise and proven experience in Data Loss Prevention (DLP) and Data Security Posture Management (DSPM), to join our team as an Associate Director of Information Security. This is a senior technical role that combines strategic leadership with technical execution to protect sensitive data across complex environments. In addition, this role will also oversee the Information Security Third-Party Risk Management (TPRM) program, ensuring robust security practices across internal and external environments. The Associate Director will lead a small team of security professionals and will report to the Director of Information Security.
Responsibilities
Essential Duties and Responsibilities
Partner with Data Governance and business stakeholders to implement and operationalize enterprise data classification and labelling requirements, including Microsoft Purview sensitivity labels and associated data protection controls.
Lead the implementation, management, and continuous improvement of enterprise DLP and DSPM capabilities across on-premises, cloud, and SaaS environments, ensuring technical controls align with enterprise data classification, labelling, and handling requirements.
Lead, mentor, and manage a team of security analysts, fostering a culture of continuous improvement, accountability, and professional growth.
Provide management oversight of the TPRM program, ensuring that all vendor and partner relationships meet security standards.
Develop and enforce security policies, standards, and best practices aligned with regulatory and contractual requirements.
Collaborate with IT, Legal, and Compliance teams to ensure risk mitigation and regulatory compliance.
Respond to and manage security incidents, including forensic investigations and root cause analysis.
Collaborate with architecture teams to conduct security architecture reviews for new applications, platforms, and infrastructure deployments, ensuring security is built-in by design.
Stay current on emerging threats, data protection technologies and regulatory changes
Proven hands-on experience with Data Security Posture Management (DSPM) Platforms in a hybrid environment
Strong general security knowledge across network, cloud, and application security.
Strong general knowledge in Vulnerability Management, including scanning, prioritization, and remediation processes.
Working knowledge of SIEM platforms for monitoring and threat detection.
Experience building or managing a TPRM or Vendor Security program.
Solid knowledge of data protection regulations (GDPR, CCPA) and risk frameworks (NIST CSF, ISO27001, DAMA-DMBOK)
CISSP, CISM or equivalent certifications
Preferred Qualifications/Personal Attributes
Excellent oral and written communication and presentation skills
Quality-focused individual with strong organizational skills
Must have necessary interpersonal skills to interface effectively with all levels in the organization
High integrity with a strong all-round set of business and technical skills
Ability to influence change across multiple groups, and levels
Ability to work in a face-paced environment and follow processes and procedures with accuracy and attention to detail
Problem solving and analytical abilities including the ability to critically evaluate information gathered from multiple sources, reconcile conflicts, decompose high-level information into details and apply sound business knowledge.
Ability to multi-task and handle on a proactive basis, changing priorities in a fast-paced environment to maximize time-management and efficiencies.
A strong curiosity, initiative, persistence, and willingness to experiment to provide solutions to diverse technical challenges.
Ability to work independently with minimal direction; must be a self-starter/self-motivated
Ability to work a weekly hybrid office schedule in our Waltham office
The annual base salary for this position ranges from $178,000 to $195,000. In addition, this position is eligible for an annual performance pay bonus. Exact compensation may vary based on skills, training, knowledge, and experience. Alkermes offers a competitive benefits package. Additional details can be found on our careers website:
Alkermes has recently adopted a hybrid working environment to support and meet the needs of employees and this role will operate in a flexible environment with 60% of time in the office and 40% from home. This position is eligible for the hybrid workplace model, requiring work to be completed onsite at our Waltham, MA office at least 3 days per week. This role is not eligible for fully remote work.
#LI-AH1
Why join Team Alkermes?
Alkermes applies its decades of deep neuroscience expertise to develop medicines designed to help people living with complex and difficult-to-treat psychiatric and neurological disorders. A global biopharmaceutical company, headquartered in Ireland with U.S. locations in Massachusetts and Ohio, we seek to make a meaningful difference in the way people manage their diseases. We have a portfolio of proprietary commercial products for the treatment of alcohol dependence, opioid dependence, schizophrenia, bipolar I disorder and narcolepsy, and a pipeline of clinical and preclinical candidates in development for various psychiatric and neurological disorders.
We are proud to have been recognized as an employer of choice by many national organizations. In 2024 and 2025, we were certified as a Great Place to Work in the U.S. and named one of Massachusetts’ Top Places to Work by the Boston Globe, a Best Place to Work in Greater Cincinnati by the Cincinnati Business Courier and recognized as a Best Place to Work in BioPharma by Fortune Magazine.
Alkermes, Inc. is an equal employment opportunity employer and does not discriminate against any qualified applicant or employee because of race, creed, color, age, national origin, ancestry, religion, gender, sexual orientation, gender expression and identity, disability, genetic information, veteran status, military status, application for military service or any other characteristic protected by local, state or federal law. Alkermes also complies with all work authorization and employment eligibility verification requirements of the Immigration and Nationality Act and IRCA. Alkermes is an E-Verify employer.