What are the responsibilities and job description for the Director, Cybersecurity position at Verona Pharma?
Who We Are
At Verona Pharma, we are passionate about transforming the lives of millions of people living with chronic respiratory diseases. With our first product now approved by the US FDA, we’re just getting started. Our innovative respiratory pipeline targets a range of conditions, including non-CF bronchiectasis, cystic fibrosis (CF), and asthma, driven by a commitment to bringing relief to patients navigating the challenges of progressive respiratory conditions.
Joining Verona means being part of a forward-thinking team that’s redefining what’s possible in drug development and commercialization. Guided by experienced leadership, we embrace a collaborative, diverse, and inclusive culture where your contributions can help shape a healthier future for patients worldwide. Be part of a mission-driven organization where your work has a direct impact on improving quality of life.
Verona Pharma seeks a Director, Cybersecurity reporting to the VP, Digital & IT. This role leads and manages the cybersecurity team ensuring the security of the organization's technology systems, networks, and data. The Director, Cybersecurity is the organization’s expert on identification, protection, detection, response, recovery, and governance. The ideal candidate thrives in a dynamic environment, embraces cloud-based solutions, and prioritizes simplification including attack surface reduction.
What You’ll Do
At Verona, You’ll Have The Chance To Be Part Of a Team Bringing First-in-class Treatments To Patients Who Need Them Most. We Offer
Verona Pharma is an Equal Opportunity Employer and prohibits discrimination and harassment of any kind. All employment decisions at Verona Pharma are based on business needs, job requirements and individual qualifications, without regard to race, color, religion or belief, national, social or ethnic origin, sex (including pregnancy), age, physical, mental or sensory disability, HIV Status, sexual orientation, gender identity and/or expression, marital, civil union or domestic partnership status, past or present military service, family medical history or genetic information, family or parental status, or any other status protected by the laws or regulations in the locations where we operate.
At Verona Pharma, we are passionate about transforming the lives of millions of people living with chronic respiratory diseases. With our first product now approved by the US FDA, we’re just getting started. Our innovative respiratory pipeline targets a range of conditions, including non-CF bronchiectasis, cystic fibrosis (CF), and asthma, driven by a commitment to bringing relief to patients navigating the challenges of progressive respiratory conditions.
Joining Verona means being part of a forward-thinking team that’s redefining what’s possible in drug development and commercialization. Guided by experienced leadership, we embrace a collaborative, diverse, and inclusive culture where your contributions can help shape a healthier future for patients worldwide. Be part of a mission-driven organization where your work has a direct impact on improving quality of life.
Verona Pharma seeks a Director, Cybersecurity reporting to the VP, Digital & IT. This role leads and manages the cybersecurity team ensuring the security of the organization's technology systems, networks, and data. The Director, Cybersecurity is the organization’s expert on identification, protection, detection, response, recovery, and governance. The ideal candidate thrives in a dynamic environment, embraces cloud-based solutions, and prioritizes simplification including attack surface reduction.
What You’ll Do
- Collaborate cross-functionally to enhance and mature the existing cybersecurity program.
- Help define a company-wide cybersecurity strategy, including data governance and business disaster recovery and business continuity.
- Lead the Cybersecurity Governance Committee ensuring transparency, accountability, and compliance with industry standards and regulations.
- Oversee monitoring, incident response, and continuous improvements.
- Lead the incident response plan and related playbooks.
- Manage multiple vendor relationships, assess new technologies, and identify risk mitigation strategies.
- Promote awareness through training and best practices.
- Stay ahead of emerging threats, conduct risk assessments, and benchmarking.
- Manage the related budget and optimize resource allocation.
- Minimal travel required.
- Other duties as assigned.
- Startup mindset—agility, adaptability, innovation, and commitment.
- 10 years of related experience, including 5 years in leadership roles. Recent experience in pharmaceuticals is preferred.
- Bachelor’s degree in a relevant field or equivalent experience
- Current CISSP certification.
- Strong knowledge of security frameworks (e.g., NIST, CIS, HIPAA, SOX) and hands-on experience with Microsoft security tools.
- Recent experience using Microsoft Entra ID, Microsoft 365, and, Microsoft Defender.
- Proficiency in overseeing, managing, and using cybersecurity tools and technologies, such as security information and event management (SIEM), threat and vulnerability management, and cloud security systems.
- Exceptional problem-solving, communication, and collaboration skills.
At Verona, You’ll Have The Chance To Be Part Of a Team Bringing First-in-class Treatments To Patients Who Need Them Most. We Offer
- A collaborative and inclusive culture that values your contributions.
- Remote work flexibility for a better work-life balance.
- Competitive benefits, including generous PTO and comprehensive health plans.
Verona Pharma is an Equal Opportunity Employer and prohibits discrimination and harassment of any kind. All employment decisions at Verona Pharma are based on business needs, job requirements and individual qualifications, without regard to race, color, religion or belief, national, social or ethnic origin, sex (including pregnancy), age, physical, mental or sensory disability, HIV Status, sexual orientation, gender identity and/or expression, marital, civil union or domestic partnership status, past or present military service, family medical history or genetic information, family or parental status, or any other status protected by the laws or regulations in the locations where we operate.