We are looking for a Senior Director, Cyber Security to join our Information Security team. This is an exciting opportunity to lead enterprise-wide cyber security strategy, strengthen security operations, and help protect Clarivate’s systems, products, data, and customers, including technology and data supporting healthcare, life sciences, and other regulated environments. In this role, you will partner closely with Technology, Product, Engineering, Enterprise Architecture, Privacy, Legal, Compliance, Quality, and business leaders to advance a risk-based security program, improve control maturity, and support the continued resilience of Clarivate’s Life Science business.
About You – experience, education, skills, and accomplishments
Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field, or equivalent relevant experience.
12+ years of experience in cyber security within healthcare, life sciences, or other highly regulated environments.
5+ years of experience leading cyber security teams, programs, or cross-functional security initiatives.
Familiarity with relevant healthcare and life sciences requirements and standards, including GxP, FDA regulations, 21 CFR Part 11, HIPAA, computerized system validation, and data integrity principles.
Experience defining and executing enterprise cyber security strategy, roadmaps, controls, and operating models.
Experience overseeing security operations, incident response, vulnerability management, threat monitoring, security engineering, or cyber risk management.
Working knowledge of security and compliance frameworks such as ISO 27001, SOC 2, NIST, CIS Controls, or similar standards.
Experience translating cyber risk, security metrics, and technical concepts into clear recommendations for senior leadership and business stakeholders.
It would be great if you also have . . .
Relevant security certification such as CISSP, CISM, CISA, CRISC, CCSP, or equivalent experience.
Experience in a global, matrixed organization with complex technology environments and regulated customer requirements.
Experience with cloud security across AWS, Azure, GCP, or hybrid cloud environments.
Experience with SIEM, EDR/XDR, IAM, DLP, vulnerability management, third-party risk, or other enterprise security technologies.
Experience supporting secure software development, product security, customer security assurance, or security-by-design programs.
Experience leading incident readiness, tabletop exercises, penetration testing, red team/blue team activities, or post-incident improvement programs.
What will you be doing in this role?
Support customer assurance, audits, and regulatory inspections involving healthcare, life sciences, GxP, or other regulated products and technology environments.
Define and execute the cyber security strategy, roadmap, and operating model to reduce enterprise risk and strengthen Clarivate’s security posture.
Lead cyber security programs across security operations, incident response, vulnerability management, security engineering, governance, risk, and compliance.
Partner with Technology, Product, Engineering, Privacy, Legal, Compliance, Procurement, and business leaders to embed security requirements into products, platforms, processes, and vendor relationships.
Oversee monitoring, escalation, investigation, and response processes for security incidents, including coordination with internal teams and external partners as needed.
Drive improvement of security controls, policies, standards, procedures, dashboards, metrics, and reporting aligned to internal requirements and external frameworks.
Evaluate current and emerging cyber threats, identify security gaps, and prioritize remediation activities in partnership with technology and product teams.
Support audit, certification, customer assurance, and regulatory activities by ensuring security practices are documented, measurable, and continuously improved.
Develop and lead a high-performing cyber security team, including resource planning, capability development, coaching, and prioritization of work against business-critical objectives.
Communicate cyber risk, program performance, incident trends, and strategic recommendations to executive and senior leadership audiences.
About the Team
The Information Security team is responsible for helping safeguard Clarivate’s information assets and supporting the confidentiality, integrity, and availability of our systems, products, and data. The team partners across Technology, Product, Engineering, Privacy, Legal, Compliance, Procurement, and business functions to manage cyber risk, support security operations, advance governance and compliance programs, and continuously improve Clarivate’s global security posture.
Hours of Work
This is a full-time position, primarily working core business hours in your time zone, with flexibility to partner across global time zones as needed. This role may require availability outside of standard business hours to support urgent security incidents, escalations, or business-critical events.
Compensation - US
The expected base salary for this position is $188,000 - $235,000 USD per year. This role is eligible for (incentive or bonus) earnings. Individual pay is based upon experience, education, skill and ability, expertise, and relevant factors.
At Clarivate, we are committed to providing equal employment opportunities for all qualified persons with respect to hiring, compensation, promotion, training, and other terms, conditions, and privileges of employment. We comply with applicable laws and regulations governing non-discrimination in all locations.
Skills Required
- Bachelor's degree in Computer Science, Information Technology, Cybersecurity, a related field, or equivalent relevant experience
- 12+ years of cybersecurity experience within healthcare, life sciences, or other highly regulated environments
- 5+ years leading cybersecurity teams, programs, or cross-functional security initiatives
- Familiarity with GxP, FDA regulations, 21 CFR Part 11, HIPAA, computerized system validation, and data integrity principles
- Experience defining and executing enterprise cybersecurity strategy, roadmaps, controls, and operating models
- Experience overseeing security operations, incident response, vulnerability management, threat monitoring, security engineering, or cyber risk management
- Working knowledge of ISO 27001, SOC 2, NIST, CIS Controls, or similar security and compliance frameworks
- Experience communicating cyber risk, security metrics, and technical concepts to senior leadership and business stakeholders
- CISSP, CISM, CISA, CRISC, CCSP, or equivalent experience
- Experience in a global, matrixed organization with complex technology environments and regulated customer requirements
- Experience with cloud security across AWS, Azure, GCP, or hybrid cloud environments
- Experience with SIEM, EDR/XDR, IAM, DLP, vulnerability management, third-party risk, or other enterprise security technologies
- Experience supporting secure software development, product security, customer security assurance, or security-by-design programs
- Experience leading incident readiness, tabletop exercises, penetration testing, red team/blue team activities, or post-incident improvement programs
Clarivate Analytics Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Clarivate Analytics and has not been reviewed or approved by Clarivate Analytics.
-
Strong & Reliable Incentives — Incentives in sales and select product/tech roles provide meaningful upside for high performers, with commission structures boosting total compensation when targets are exceeded. Role-linked variable pay is a clear strength in revenue-driving positions.
-
Leave & Time Off Breadth — PTO is ample in the U.S., with paid parental leave available, making time-off policies a notable part of the package. Generous vacation and holiday allowances stand out as positives.
-
Wellbeing & Lifestyle Benefits — Hybrid and remote options are common and paired with a formal wellbeing framework and EAP, supporting work–life balance. Core medical, dental, and vision coverage is broadly available in the U.S., reinforcing everyday wellbeing support.
Clarivate Analytics Insights
What We Do
Clarivate™ is a global leader in providing solutions to accelerate the lifecycle of innovation. Our bold mission is to help customers solve some of the world’s most complex problems by providing actionable information and insights that reduce the time from new ideas to life-changing inventions in the areas of science and intellectual property. We help customers discover, protect and commercialize their inventions using our trusted subscription and technology-based solutions coupled with deep domain expertise. For more information, please visit clarivate.com.
