Senior Manager, IT Technical Security

Cytokinetics•South San Francisco, CA

3d•Hybrid

About The Position

Cytokinetics is a specialty cardiovascular biopharmaceutical company advancing medicines for patients with cardiac muscle dysfunction. The Senior Manager, IT Technical Security supports the continued development of the company’s Cybersecurity Program by overseeing, implementing, and operating the technical platforms that underpin the program. The role requires a strong understanding of security technologies, including authentication and access management, multi-factor authentication, endpoint detection and remediation, operating-system and application hardening, cloud infrastructure, and vulnerability and patch management. Based at Cytokinetics’ South San Francisco headquarters, this position monitors security across cloud and on-premises environments, coordinates risk-based remediation, hardens critical infrastructure, maintains a technical security scorecard, and leads investigation and response to cybersecurity events and incidents. The role works closely with IT, business colleagues, and external partners to reduce risk while balancing business and operational needs.

Requirements

8 or more years of relevant IT or cybersecurity experience.
5 or more years implementing and managing enterprise security platforms.
Firm understanding of the NIST framework and supporting procedures and controls.
Strong verbal and written communication skills, including the ability to present complex information to the broader company in an accessible format.
Strong collaboration skills.
Highly organized and curious.
Ability to work collaboratively with IT and business colleagues to reduce security risk while balancing appropriate risk acceptance and providing education as necessary.

Nice To Haves

A bachelor’s degree in a related field or equivalent practical experience is preferred.

Responsibilities

Monitor the security posture of enterprise technology environments across cloud and on-premises infrastructure, endpoints, networks, identity platforms, and business applications.
Maintain a structured process for aggregating, analyzing, and tracking vulnerability data to identify trends, prioritize risks, monitor remediation progress, and support informed decision-making.
Collaborate with internal stakeholders and external partners to assess, prioritize, and remediate security issues using a risk-based approach that balances business needs, operational impact, and security requirements.
Review critical infrastructure platform configurations, including Exchange, SharePoint, Teams, Box, Azure, AWS, and firewalls, and work with internal and external support teams to harden them in accordance with current security requirements and standards.
Maintain a technical security scorecard and report periodically to the CISO and IT.
Own and coordinate investigation and response to cybersecurity events and incidents, including triage, containment, remediation, recovery, and follow-up.
Collaborate with IT and business colleagues to reduce security risk while balancing appropriate risk acceptance and providing education as necessary.