Associate Director, Information Security-DLP

Associate Director of Information Security

We are seeking a highly motivated, hands-on Information Security leader with strong, broad security expertise and proven experience in Data Loss Prevention (DLP) and Data Security Posture Management (DSPM), to join our team as an Associate Director of Information Security. This is a senior technical role that combines strategic leadership with technical execution to protect sensitive data across complex environments. In addition, this role will also oversee the Information Security Third-Party Risk Management (TPRM) program, ensuring robust security practices across internal and external environments. The Associate Director will lead a small team of security professionals and will report to the Director of Information Security.

Essential Duties and Responsibilities

• Partner with Data Governance and business stakeholders to implement and operationalize enterprise data classification and labelling requirements, including Microsoft Purview sensitivity labels and associated data protection controls.
• Lead the implementation, management, and continuous improvement of enterprise DLP and DSPM capabilities across on-premises, cloud, and SaaS environments, ensuring technical controls align with enterprise data classification, labelling, and handling requirements.
• Lead, mentor, and manage a team of security analysts, fostering a culture of continuous improvement, accountability, and professional growth.
• Provide management oversight of the TPRM program, ensuring that all vendor and partner relationships meet security standards.
• Develop and enforce security policies, standards, and best practices aligned with regulatory and contractual requirements.
• Collaborate with IT, Legal, and Compliance teams to ensure risk mitigation and regulatory compliance.
• Respond to and manage security incidents, including forensic investigations and root cause analysis.
• Collaborate with architecture teams to conduct security architecture reviews for new applications, platforms, and infrastructure deployments, ensuring security is built-in by design.
• Stay current on emerging threats, data protection technologies and regulatory changes

Basic Qualifications, Minimum Education & Experience Requirements

• Bachelor’s degree in computer science, Information Technology, or another related field
• Minimum of 8 years of experience in Information Security, with at least 3 years proven experience in a security leadership or management role.
• Proven track record in DLP program leadership and DLP Solutions (e.g. MS Purview, Proofpoint)
• Proven hands-on experience with Data Security Posture Management (DSPM) Platforms in a hybrid environment
• Strong general security knowledge across network, cloud, and application security.
• Strong general knowledge in Vulnerability Management, including scanning, prioritization, and remediation processes.
• Working knowledge of SIEM platforms for monitoring and threat detection.
• Experience building or managing a TPRM or Vendor Security program.
• Solid knowledge of data protection regulations (GDPR, CCPA) and risk frameworks (NIST CSF, ISO27001, DAMA-DMBOK)
• CISSP, CISM or equivalent certifications

Preferred Qualifications/Personal Attributes

• Excellent oral and written communication and presentation skills

• Quality-focused individual with strong organizational skills

• Must have necessary interpersonal skills to interface effectively with all levels in the organization

• High integrity with a strong all-round set of business and technical skills

• Ability to influence change across multiple groups, and levels

• Ability to work in a face-paced environment and follow processes and procedures with accuracy and attention to detail

• Problem solving and analytical abilities including the ability to critically evaluate information gathered from multiple sources, reconcile conflicts, decompose high-level information into details and apply sound business knowledge.

• Ability to multi-task and handle on a proactive basis, changing priorities in a fast-paced environment to maximize time-management and efficiencies.

• A strong curiosity, initiative, persistence, and willingness to experiment to provide solutions to diverse technical challenges.

• Ability to work independently with minimal direction; must be a self-starter/self-motivated

• Ability to work a weekly hybrid office schedule in our Waltham office

The annual base salary for this position ranges from $178,000 to $195,000. In addition, this position is eligible for an annual performance pay bonus. Exact compensation may vary based on skills, training, knowledge, and experience. Alkermes offers a competitive benefits package. Additional details can be found on our careers website:

Alkermes has recently adopted a hybrid working environment to support and meet the needs of employees and this role will operate in a flexible environment with 60% of time in the office and 40% from home. This position is eligible for the hybrid workplace model, requiring work to be completed onsite at our Waltham, MA office at least 3 days per week. This role is not eligible for fully remote work.