Back to jobs
New

Head of Global Cybersecurity

Somerset, New Jersey, United States

Legend Biotech is a global biotechnology company dedicated to treating, and one day curing, life-threatening diseases. Headquartered in Somerset, New Jersey, we are developing advanced cell therapies across a diverse array of technology platforms, including autologous and allogenic chimeric antigen receptor T-cell, T-cell receptor (TCR-T), and natural killer (NK) cell-based immunotherapy. From our three R&D sites around the world, we apply these innovative technologies to pursue the discovery of safe, efficacious and cutting-edge therapeutics for patients worldwide.  

Legend Biotech entered into a global collaboration agreement with Janssen, one of the pharmaceutical companies of Johnson & Johnson, to jointly develop and commercialize ciltacabtagene autolecuel (cilta-cel). Our strategic partnership is designed to combine the strengths and expertise of both companies to advance the promise of an immunotherapy in the treatment of multiple myeloma.

 

Legend Biotech is seeking Head of Global Cybersecurity as part of the IT team based in Somerset, NJ. 

Role Overview

 The Head of Global Cybersecurity is a senior leadership role that will oversee and shape the organization’s entire cybersecurity strategy, encompassing people, processes, and technologies. This role requires not only high-level strategic direction but also hands-on responsibility for developing and implementing cybersecurity capabilities across the organization’s global operations. This role will be reported to the Head of Information Technology and will be a member of the Global IT Leadership Team.

Key Responsibilities  

  • Cybersecurity Strategy and Policy Development: Lead the creation of a comprehensive cybersecurity strategy aligned with global business objectives. Develop policies to protect information assets and ensure regulatory compliance. Balance security needs with operational efficiency through a risk-based approach.
  • Risk Management and Threat Analysis: Identify, assess, and mitigate cybersecurity risks across all regions and systems. Develop and apply risk management frameworks, performing regular threat assessments to address vulnerabilities proactively.
  • Incident Response and Recovery: Establish and maintain robust incident response protocols, including detection, response, and recovery procedures. Lead the organization through high-stakes incidents, minimizing operational impact and safeguarding data integrity.
  • Solution Development Based on Risk: Develop and implement cybersecurity solutions that are tailored to the specific risk profiles. Utilize a risk-based approach to prioritize and address the most critical vulnerabilities, ensuring that resources are allocated efficiently. Continuously monitor and adapt solutions to evolving threats, maintaining a proactive stance in safeguarding the organization's assets.
  • Collaboration and Reporting: Collaborate with the Global IT Leadership Team to align IT and cybersecurity initiatives, fostering a unified approach to protecting organizational assets. Report on cybersecurity performance, risk status, and incidents to executive stakeholders and the audit committee.
  • Leadership and Team Management: Oversee the global cybersecurity team, including recruitment, training, and development. Promote a culture of security awareness and ensure alignment with cybersecurity goals.
  • Technology and Vendor Management: Select, implement, and oversee cybersecurity technologies and solutions. Manage third-party vendor relationships to ensure compliance with organizational cybersecurity standards.
  • The incumbent has the authority to make decisions related to technical direction, methodologies, approaches and processes. The person can also make decisions related to project execution, including timelines, milestones and resource allocation within budget. Higher-level approvals are required for those related to significant budget allocations, strategic shifts, or actions may involve significant risks to the company or have substantial financial or long-term implications.

Requirements

  • Degree in a technology-related field or business administration.
  • Professional security management certification (e.g., CISSP, CISM) preferred.
  • Leadership in Multinational Corporations: Demonstrated expertise in managing cybersecurity operations across diverse regions, including China, the US, and the EU. Skilled in navigating complex regulatory frameworks and cultural nuances to ensure compliance and robust security standards.
  • Technical and Strategic Expertise: Deep knowledge of cybersecurity technologies and protocols, with the ability to turn technical issues into actionable business strategies and solutions.
  • Project and Budget Management: Proficient in allocating resources, managing budgets, and delivering cybersecurity projects within financial and timeline constraints.
  • Relevant Certifications: Strongly preferred certifications such as CISSP, CISM, or CISA, paired with knowledge of risk frameworks like NIST and ISO 27001.
  • Industry Experience: Over 15 years in information security, focusing on risk management, threat mitigation, and incident response. Knowledgeable about biotech/pharma regulations (HIPAA, FDA), including GMP and non-GMP environments.
  • Vendor and Contract Management: Skilled in managing third-party cybersecurity standards and overseeing managed services.
  • Communication and Integrity: Strong written and verbal communication skills, with a commitment to high ethical standards.
  • Cross-Cultural Team Collaboration: Experienced in managing teams across time zones and navigating cultural nuances in cybersecurity practices.
  • Global Incident Response: Proficient in coordinating incident response globally, adapting to regional legal requirements, including those in China, the EU, and the US.
  • Cybersecurity Program Development: Experienced in building cybersecurity programs that prioritize risk management and advanced threat detection.
  • Framework and Compliance Proficiency: Familiar with frameworks like ISO 27001, GDPR, SOX, and HIPAA for seamless regulatory alignment.
  • Cloud Security and Data Residency: Expertise in cloud security and compliance with data residency laws.
  • Cybersecurity Automation and AI: Knowledgeable about automation and AI in cybersecurity, mindful of regional regulatory impacts.
  • Mandarin would be a plus.

#Li-LB1

#Li-Hybrid

The anticipated base pay range is:

$285,906 - $375,253 USD

Benefits:

We are committed to creating a workplace where employees can thrive - both professionally and personally. To attract and retain top talent in a highly competitive industry, we offer a best-in-class benefits package that supports well-being, financial stability, and long-term career growth. Our offerings are designed to meet the diverse needs of our team members and their families, ensuring they feel valued and supported every step of the way. Highlights include medical, dental, and vision insurance as well as a 401(k)-retirement plan with company match that vest fully on day one. Equity and stock options are available to employees in eligible roles, we offer eight weeks of paid parental leave after just three months of employment, and a paid time off policy that includes 15 vacation days, 5 personal days, 5 sick days, 11 U.S. national holidays, and 3 floating holidays. Additional benefits include flexible spending and health savings accounts, life and AD&D insurance, short- and long-term disability coverage, legal assistance, and supplemental plans such as pet, critical illness, accident, and hospital indemnity insurance. We also provide commuter benefits, family planning and care resources, well-being initiatives, and peer-to-peer recognition programs - demonstrating our ongoing commitment to building a culture where our people feel empowered, supported, and inspired to do their best work.

EEO Statement

Legend Biotech is a proud equal opportunity/affirmative action employer committed to attracting, retaining, and maximizing the performance of a diverse and inclusive workforce. It is Legend’s policy to ensure equal employment opportunity without discrimination or harassment based on race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity or expression, age, disability, national origin, marital or domestic/civil partnership status, genetic information, citizenship status, uniformed service member or veteran status, or any other characteristic protected by applicable law.

Employment is at-will and may be terminated at any time with or without cause or notice by the employee or the company. Legend may adjust base salary or other discretionary compensation at any time based on individual, team, performance, or market conditions.

Legend Biotech maintains a drug-free workplace.

Apply for this job

*

indicates a required field

Resume/CV*

Accepted file types: pdf, doc, docx, txt, rtf

Cover Letter

Accepted file types: pdf, doc, docx, txt, rtf

Select...
Select...
Select...
Select...
Select...
Select...
Select...
Select...
Select...

I (the candidate) enter into this Non-Disclosure Agreement (the “Agreement”) with Legend Biotech USA Inc. (the “Company”), effective as of the date of my acknowledgement below, for the purpose of enabling the Company to evaluate a possible employment relationship with me.

  1. Access to Company Confidential Information. I acknowledge that for the sole and limited purpose of evaluating a possible employment relationship with me, the Company might disclose, or enable me to have access to, certain Confidential Information of the Company, as defined below.  I agree that, except for purposes of evaluating a possible employment relationship with the Company or as expressly authorized in writing by the Company, I will (a) not use or disclose any Confidential Information; (b) keep all Confidential Information confidential at all times; and (c) not copy, reproduce or modify any Confidential Information.
  2. Definition of “Confidential Information.” For purposes of this Agreement, “Confidential Information” shall mean any and all information and materials provided to me by the Company, including without limitation, inventions, trade secrets, software code, product development and marketing strategies, ideas, processes, formulas, know-how, unpublished financial information, business plans, contractual relationships with third parties and operating strategies; memoranda, notes, records, drawings, manuals, disks, or other documents and media; and all embodiments, copies, extracts, and summaries thereof; provided, however, that “Confidential Information” shall not include information that: (a) is generally known or available to the public, or (b) is furnished to me by a third party who obtained such information using lawful means and without any restrictions on disclosure.
  3. Third Party Information. I agree that during the course of communications with the Company pursuant to this Agreement or in connection with my application and interviews for employment with the Company, I will not make any unauthorized use or disclosure to the Company of any confidential or proprietary information or trade secrets of any other person or entity to whom I have an obligation of confidentiality with respect to such information, including any current or former employer.  I further agree not to provide to the Company any materials or documents of any third party that are not generally available to the public.
  4. Remedies for Breach. I acknowledge that in the event of any breach of this Agreement, the Company will not have an adequate remedy in money or damages, and therefore the Company shall be entitled to obtain temporary, preliminary and/or permanent injunctive relief to redress any such breach, from any court of competent jurisdiction, and that the Company’s right to obtain such relief shall not limit its right to obtain other available remedies.
  5. General. The interpretation and enforcement of this Agreement shall be governed by the laws of the State of California.  This Agreement constitutes the entire agreement between the parties concerning the subject matters hereof; it supersedes any and all prior agreements or representations, written or oral, with respect to its subject matters; and it cannot be modified except in a written agreement signed by the Company.

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self-identification survey. Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiring process or thereafter. Any information that you do provide will be recorded and maintained in a confidential file.

As set forth in Legend Biotech US’s Equal Employment Opportunity policy, we do not discriminate on the basis of any protected group status under any applicable law.

Select...
Select...
Race & Ethnicity Definitions

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection. As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measure the effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categories is as follows:

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.

A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.

Select...

Voluntary Self-Identification of Disability

Form CC-305
Page 1 of 1
OMB Control Number 1250-0005
Expires 04/30/2026

Why are you being asked to complete this form?

We are a federal contractor or subcontractor. The law requires us to provide equal employment opportunity to qualified people with disabilities. We have a goal of having at least 7% of our workers as people with disabilities. The law says we must measure our progress towards this goal. To do this, we must ask applicants and employees if they have a disability or have ever had one. People can become disabled, so we need to ask this question at least every five years.

Completing this form is voluntary, and we hope that you will choose to do so. Your answer is confidential. No one who makes hiring decisions will see it. Your decision to complete the form and your answer will not harm you in any way. If you want to learn more about the law or this form, visit the U.S. Department of Labor’s Office of Federal Contract Compliance Programs (OFCCP) website at www.dol.gov/ofccp.

How do you know if you have a disability?

A disability is a condition that substantially limits one or more of your “major life activities.” If you have or have ever had such a condition, you are a person with a disability. Disabilities include, but are not limited to:

  • Alcohol or other substance use disorder (not currently using drugs illegally)
  • Autoimmune disorder, for example, lupus, fibromyalgia, rheumatoid arthritis, HIV/AIDS
  • Blind or low vision
  • Cancer (past or present)
  • Cardiovascular or heart disease
  • Celiac disease
  • Cerebral palsy
  • Deaf or serious difficulty hearing
  • Diabetes
  • Disfigurement, for example, disfigurement caused by burns, wounds, accidents, or congenital disorders
  • Epilepsy or other seizure disorder
  • Gastrointestinal disorders, for example, Crohn's Disease, irritable bowel syndrome
  • Intellectual or developmental disability
  • Mental health conditions, for example, depression, bipolar disorder, anxiety disorder, schizophrenia, PTSD
  • Missing limbs or partially missing limbs
  • Mobility impairment, benefiting from the use of a wheelchair, scooter, walker, leg brace(s) and/or other supports
  • Nervous system condition, for example, migraine headaches, Parkinson’s disease, multiple sclerosis (MS)
  • Neurodivergence, for example, attention-deficit/hyperactivity disorder (ADHD), autism spectrum disorder, dyslexia, dyspraxia, other learning disabilities
  • Partial or complete paralysis (any cause)
  • Pulmonary or respiratory conditions, for example, tuberculosis, asthma, emphysema
  • Short stature (dwarfism)
  • Traumatic brain injury
Select...

PUBLIC BURDEN STATEMENT: According to the Paperwork Reduction Act of 1995 no persons are required to respond to a collection of information unless such collection displays a valid OMB control number. This survey should take about 5 minutes to complete.