Director, IT Infrastructure and Security

What You will Do

The Director, IT Infrastructure and Security, is a hands-on leader responsible for the reliability, security and scalability of the technology environment that supports MBX Biosciences as we advance our pipeline toward late-stage development. Reporting to the VP, IT, you will build and scale IT operations in a regulated environment, own the operational execution of our cybersecurity program in partnership with our fractional CISO, and help lead the security strategy and policy, and oversee cloud, network and Tier 1 and Tier 2 service desk operations.

You will be well versed in modern advanced technologies, including generative and agentic AI, and will use them to strengthen security operations, improve insight into risk, and increase the efficiency of IT. This role combines strategic leadership with direct technical involvement and is ideal for someone who is equally comfortable setting direction with executives and rolling up their sleeves to solve problems alongside the team.

Key responsibilities include

• Partner with the VP, IT and fractional CISO, in setting the overall security strategy and policy; own the execution of the cybersecurity program, including the roadmap, risk register and NIST CSF 2.0 standards, and report cyber risk to leadership and the Board.
• Apply generative and agentic AI to security operations and risk insight, including NIST CSF 2.0 assessment, prioritized remediation, and continuous control monitoring, to speed detection and response.
• Oversee security operations, including threat detection and response, vulnerability and patch management, endpoint and email security, and incident response, working with MDR/MSSP partners and joining investigations as needed.
• Own the identity and access management program, including conditional access, phishing-resistant MFA, MFA registration controls, and privileged access.
• Define secure architecture standards for cloud, network, identity, and data protection to safeguard intellectual property, clinical data, and corporate data.
• Partner with Legal, Quality, Data, and business leaders on responsible AI governance, including approved use cases, data protection, access controls, human oversight and AI risk assessment, aligned to the NIST AI Risk Management Framework.
• Prepare Microsoft 365 for Copilot and AI, including SharePoint permissions, sensitivity labels, data loss prevention, and data classification.
• Oversee cloud and network operations, including Microsoft 365, LAN/WAN, wireless, firewalls and remote access for our Carmel and Burlington offices and remote workforce, ensuring availability, performance, and cost effectiveness.
• Lead Tier 1 and Tier 2 service desk operations, including endpoint and mobile device management, onboarding and offboarding, service levels, and end user experience.
• Build and scale ITIL-aligned IT processes, test backup, disaster recovery, and ransomware recovery annually, including executive incident response tabletops.
• Ensure IT systems, controls and documentation meet regulatory and audit requirements, such as GxP, 21 CFR Part 11, SOX IT general controls, and privacy laws, in partnership with Quality, Legal, Finance and the business.
• Prepare IT and security for regulatory inspections and commercial launch, including audit evidence and a risk-based computer system validation and change-control approach (Annex 11, data integrity).
• Own the multi-year infrastructure, operations and security roadmap and budget, prioritizing by business need and cyber risk, and report KPIs and risk indicators (SLAs, patch aging, response times, recovery objectives, cost) to the VP, IT, and executive leadership.
• Plan infrastructure and security for the shift from clinical to commercial stage, including new sites, CRO and CDMO data sharing, and expanded compliance scope.
• Consolidate and govern managed service, MDR/MSSP and service desk providers, including contracts, SLAs, budget, and third-party risk.
• Over time, hire, coach, and develop a high-performing team, and build a culture of security awareness, including phishing simulation and role-based training.

Read the job posting on the MBX Biosciences site

Source: the MBX Biosciences Greenhouse job board. We last checked this job 7 h ago. We first saw it 34 h ago. A job on a job board does not always mean that the team interviews people now. We found this job board in a public list. We did not yet compare it with the careers page of the company.