Associate Director, Information Security

Alkermes

62d•$178,000 - $195,000•Hybrid

About The Position

We are seeking a highly motivated, experienced hands-on Associate Director of Information Security (Cloud and Emerging Technology) to take a leadership role in shaping and executing the organizations security strategy in advanced technologies. Reporting to the Director of Information Security, this position will oversee a small team of security professionals and act as a trusted advisor across IT, and business units. This role will be responsible for developing, implementing, and enforcing security frameworks and guardrails for cloud environments (primarily AWS), AI/ML platforms, Large Language Models (LLMs), and DevSecOps practices. In this role, the Associate Director will lead efforts to secure cloud and emerging technologies, ensuring compliance with regulatory requirements and alignment with organizational risk appetite.

Requirements

BS/BA in Computer Science, Information Technology, or another related field
Minimum 10 years’ experience in IT or Information Security with at least 6 years in Security Architecture\Engineering & minimum of 2+ years focused specifically on AI/ML Security, MLOps Security and GenAI guardrails
Expertise in AI security concepts: prompt injection, model exploitation, adversarial attacks, prompt-based exfiltration, data leakage risks, and agent misbehavior
Proven experience evaluating and securing AI\ML systems, including generative AI and LLM deployments in enterprise environments
Experience developing and implementing AI governance frameworks
Deep hands-on experience in AWS Cloud Security
Solid background in cybersecurity engineering: IAM, network security, DLP, encryption, monitoring, incident response and threat modelling.
Solid knowledge and understanding of security regulations and best practices such as SOX, HIPAA, CIS, ISO/IEC 42001, EU AI Act etc.
Relevant professional certifications preferred e.g. CISM, CISSP, CCSP or Cloud-specific certifications

Nice To Haves

Excellent oral and written communication and presentation skills
Quality-focused individual with strong organizational skills
Must have necessary interpersonal skills to interface effectively with all levels in the organization
High integrity with a strong all-around set of business and technical skills
Ability to influence change across multiple groups, and levels
Ability to work in a face-paced environment and follow processes and procedures with accuracy and attention to detail
Problem solving and analytical abilities including the ability to critically evaluate information gathered from multiple sources, reconcile conflicts, decompose high-level information into details and apply sound business knowledge.
Ability to multi-task and handle on a proactive basis, changing priorities in a fast-paced environment to maximize time-management and efficiencies.
Ability to work independently with minimal direction; must be a self-starter/self-motivated
Ability to work a weekly hybrid office schedule in our Waltham office

Responsibilities

Lead, mentor, and manage a small team of security professionals, fostering a culture of collaboration, innovation, and continuous improvement.
Develop, implement, and maintain a comprehensive, forward-looking security roadmap for all cloud platforms and emerging technologies.
Design and implement secure architectures and controls within multi-cloud environments (i.e. AWS, and Azure).
Design and implement enterprise-level AI security guardrails for LLMs, MCP\A2A’s, agentic workflows, and internal AI tools (chatbots, scientific ML models) and integrations
Partner with Data Science teams to conduct technical validation of AI opportunities and design secure end-to-end AI delivery pipelines.
Refine\evolve processes for AI model usage approvals, risk assessments, and supply chain security for AI components (models, datasets, embeddings, API’s)
Configure SIEM rules and observability tools to detect anomalous LLM behavior, unauthorized data access, and guardrail breaches in real-time.
Lead the integration of security tools and practices directly into the CI/CD pipeline (DevSecOps).
Work with Legal, Compliance and existing AI Governance Advisory and Enablement teams to align guardrails with evolving regulations and pharma guidelines
Monitor industry trends, threat intelligence and regulatory developments impacting new technologies
Mentor and guide security analysts on complex technical issues