Vice President, IT Resilience & Trust

Madrigal Pharmaceuticals•Conshohocken, PA

1d•$294,722 - $360,215•Hybrid

About The Position

The Vice President, IT Resilience & Trust is a strategic and operational technology executive responsible for ensuring Madrigal’s technology environment is reliable, resilient, secure, compliant, and able to scale with the business. Reporting to the Chief Information Officer, this senior IT leader leads the functional leaders responsible for Infrastructure, Cybersecurity, and Technology Compliance and establishes an integrated operating model across those domains. The role defines and executes a multi-year Resilience & Trust strategy and establishes the standards, operating practices, capabilities, controls, and management systems needed to support Madrigal’s growth, international expansion, regulated operations, and adoption of emerging technologies. The Vice President uses service, reliability, risk, security, compliance, and resilience data to guide investment decisions, manage performance, and drive continuous improvement. They partner with technology and business leaders to embed practical risk-based requirements into architecture, delivery, operations, and AI-enabled capabilities while enabling innovation and minimizing unnecessary friction. The position provides executive leadership across infrastructure and reliability, cybersecurity and technology risk, and technology compliance and governance. It also develops leaders and teams, manages budgets and external partners, and provides executive visibility into service health, resilience, cybersecurity, compliance, incidents, risks, resource constraints, and investment needs. The role is hybrid, with three days a week working in the office.

Requirements

Bachelor’s degree in Computer Science, Information Systems, Engineering, or a related discipline, or an equivalent combination of education and highly relevant experience.
Typically 20 or more years of progressive technology leadership experience, including significant responsibility across infrastructure and operations, cybersecurity, technology risk, compliance, resilience, service management, or related domains.
Demonstrated success leading multiple technology functions and senior leaders in a complex, growing organization, including building or materially transforming capabilities.
Experience in a regulated environment.
Significant experience establishing or maturing enterprise technology operations and service management, including service desk, ITSM, service ownership, incident/problem/change management, service measurement, and related operating disciplines.
Ability to define technology strategies, target-state roadmaps, architecture standards, governance mechanisms, and multi-year capability plans, and scale them through growth, international expansion, or increasing regulatory complexity.
Strong understanding of enterprise infrastructure, cloud, workplace technology, identity and access, cybersecurity, disaster recovery, resilience, service management, governance, and regulated technology controls.
Experience operating technology control environments supporting GxP or other regulated activities and working effectively with Quality, audit, risk, compliance, and other independent oversight functions.
Demonstrated experience leading major technology incidents, developing high-performing leaders and teams, managing significant budgets and external partners, and improving reliability, resilience, customer experience, security, compliance, and operational performance.
Strong executive presence, business judgment, and credibility with senior business and technology leaders.
Ability to connect business objectives, technology strategy, operational performance, risk, regulatory requirements, and investment decisions across multiple domains.
Ability to establish management systems, metrics, and accountability and use data to drive decisions and continuous improvement.
Customer- and service-oriented approach to technology operations and employee and business-user experience.
Ability to lead leaders, set strategic direction, build capabilities in ambiguous environments, and go deep into individual domains when needed.
Ability to balance innovation, speed, reliability, cybersecurity, resilience, risk, and compliance through practical, risk-based standards and controls.
Strong collaboration, communication, and influence skills in a matrixed organization; ability to lead decisively during significant incidents and translate complex technology and regulatory issues into clear business implications, options, and recommendations.

Nice To Haves

Advanced degree such as an MBA, MS, or related graduate degree.
Prior experience serving as a Chief Information Security Officer (CISO) for a publicly traded company, with executive-level experience in an environment with significant cybersecurity, regulatory, governance, and Board-level expectations.
Experience in pharmaceutical, biotechnology, life sciences, healthcare, or another highly regulated industry.

Responsibilities

Define and execute Madrigal’s integrated Resilience & Trust strategy and multi-year roadmap across infrastructure, cybersecurity, technology compliance, service management, and resilience.
Translate business growth, international expansion, regulatory requirements, technology trends, and emerging risks into priorities, standards, roadmaps, and investment decisions.
Establish target architectures, operating principles, and risk-based technology guardrails that support innovation while maintaining reliability, security, compliance, and resilience.
Partner with AI, digital, data, and other technology leaders to define practical control, security, monitoring, and assurance expectations and establish a repeatable foundation for global expansion.
Establish a data-driven operating cadence, manage investment tradeoffs, and advise the CIO and IT Leadership Team on material risks, dependencies, priorities, and decisions.
Lead infrastructure, workplace technology, enterprise service management, and technology operations to ensure services are reliable, scalable, secure, resilient, and aligned with business needs.
Define and evolve strategy for cloud, networks, workplace, identity and access, endpoints, collaboration, and other foundational technology services.
Build an enterprise-grade service management model and common ITSM practices across infrastructure, applications, digital products, data platforms, and key providers.
Mature the ITSM platform, service ownership model, CMDB and service mapping, and incident, problem, change, request, knowledge, configuration, and service-level management disciplines.
Establish service levels, customer experience measures, observability, and operational health metrics; use performance data and root-cause analysis to improve reliability, reduce technical debt, and drive continuous improvement.
Own technology resilience and major incident management, including disaster recovery, RTO/RPO, dependency mapping, testing, cross-functional recovery coordination, and executive communication during significant disruptions.
Provide executive accountability and strategic direction for the cybersecurity program, leading the Head of Cybersecurity and maintaining a risk-based strategy aligned with business priorities, regulatory obligations, and risk appetite.
Embed cybersecurity standards and controls into architecture, infrastructure, applications, vendors, acquisitions, international expansion, and major transformation initiatives.
Establish cybersecurity and technology risk expectations for emerging technologies, including AI, with innovation and delivery leaders.
Oversee identity and access, vulnerability management, monitoring, threat detection and response, endpoint and infrastructure security, sensitive information protection, and third-party technology risk.
Ensure cyber risks and incidents are assessed, prioritized, communicated, and addressed according to business impact, with visibility into posture, material risks, remediation priorities, and emerging threats.
Lead Madrigal’s technology compliance capability and establish a scalable, risk-based control environment that supports regulated operations while enabling speed and innovation.
Define governance frameworks, technology controls, standards, and operating practices supporting regulatory requirements, company policies, and risk-management expectations, with clear control ownership, execution, evidence, and remediation.
Partner with Quality on lifecycle compliance for regulated and GxP technology systems, including CSV/CSA, 21 CFR Part 11, data integrity, validation, audit readiness, and inspection support, while preserving Quality’s independent oversight role.
Partner with Finance, Internal Audit, Privacy, Legal, and other stakeholders to ensure technology controls supporting SOX, privacy, cybersecurity, data protection, and other enterprise requirements are clearly owned and effectively operated.
Establish risk-based governance and measures of control effectiveness, compliance posture, remediation progress, technology risk, and audit and inspection readiness.
Ensure material compliance risks and control deficiencies have owners, remediation plans, escalation paths, and timely closure; serve as a senior technology partner for audits, inspections, and regulatory readiness activities.
Lead, develop, and integrate Infrastructure, Cybersecurity, and Technology Compliance leaders and teams into a cohesive organization with clear accountability and strategic and operational discipline.
Raise organizational maturity through clear expectations for strategy, roadmaps, service ownership, metrics, risk management, executive communication, and continuous improvement.
Develop functional leaders, assess organizational capability as needs evolve, and make appropriate changes to talent, structure, sourcing, and operating models.
Manage budgets, investments, vendors, managed service providers, and resources across the Resilience & Trust portfolio; resolve functional tradeoffs and escalate enterprise-level decisions when needed.
Partner across the IT Leadership Team and with International and other stakeholders to embed reliability, cybersecurity, compliance, resilience, service management, and consistent technology standards into delivery and global growth.
Provide executive visibility into service health, resilience, cybersecurity, compliance, significant incidents, risks, resource constraints, and investment needs while fostering ownership, accountability, service, and continuous improvement.

Benefits

Equity for all employees.
Flexible paid time off.
Medical insurance.
Dental insurance.
Vision insurance.
Life and disability insurance.
401(k) offerings, including traditional and Roth options and an employer match.
Voluntary supplemental life insurance.
Legal services.
Mental health benefits through the Employee Assistance Program for employees and their family.
Other benefits in accordance with applicable federal, state, and local laws.