> Markdown version of [/jobs/ext/2852922-sr-director-it-head-of-security-operations](https://www.wearedevelopers.com/jobs/ext/2852922-sr-director-it-head-of-security-operations). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Sr Director, IT Head of Security Operations

- **Company:** Gilead Sciences Inc.
- **Location:** San Mateo, CA, United States (Remote available)
- **Experience:** Expert
- **Salary:** $243,100.0 - $314,600.0
- **Contract:** Permanent contract
- **Skills:** Artificial Intelligence, Software System Penetration Testing, Application Testing, User Authentication, Cloud Computing Security, Cyber Security, Data Transmissions, Data Infrastructure, Digital Assets, Multi-Factor Authentication, Identity and Access Management, Network Security, Public Key Infrastructure, Security Information and Event Management, Software Engineering, Software Vulnerability Management, Cloud Platform System, Computer Network Technologies, Software Security, Technical Debt, Information Technology, Cybercrime, Server Operating Systems & Platforms, Static Application Security Testing, Dynamic Application Security Testing
- **Published:** September 11, 2026
- **Apply:** https://www.techcareers.com/job.asp?id=3386569892&tx=TT4239TTT&pt=1&aff=0B19D771-A501-4A5E-8338-2A822B784D54&utm_source=Job%20Feed&utm_medium=textkernel&utm_campaign=DE&utm_term=0B19D771-A501-4A5E-8338-2A822B784D54

## About the Role

* Bachelor of Science degree in management information systems, computer science, engineering or another IT-related major is required
 * 14+ years of relevant experience or 12+ years with a master's or PhD
 * Information security related certifications such as CISSP, CRISC, CCSP, GIAC, etc.
 * A minimum of 8-10 years of leadership responsibilities.
 * Strong understanding of a wide variety of cybersecurity technologies relating to the following security domains: Audit and Monitoring, Risk Response & Recovery, SIEM, vulnerability management, Cryptography, Data Communications, Computer Operations Security, Telecommunications & Network Security, Security Architecture & Models, cloud security, Multi-Factor Authentication, Passwordless Authentication, Digital Rights Management, PKI, Security for AI and AI for Security solutions.
 * Strong understanding of NIST cyber security, and MITRE attack frameworks.
 * Deep knowledge of IT Security and Privacy concepts and controls, and ability to develop security standards and guidelines based on best practices and industry standards.
 * Able to lead teams through an incident from initial response, stakeholder communications and diagnosis to immediate and long-term remediation plans and activities.
 * Knowledge of information security risk management frameworks and compliance practices.
 * Knowledge of securing network technologies, client, and server operating systems.
 * Strong knowledge of Secure Software Development Lifecycle (SDLC) processes and methodologies.
 * Excellent interpersonal, communication, and presentation skills, including formal writing experience.
 * Understanding of common security standards and healthcare related regulations and data privacy.
 * Able to assess complex multi-location projects as well as identify and recommend appropriate corrective measures to resolve security and privacy related issues.
 * Strong customer service orientation and the ability to project that attitude to customers in remote locations.
 * Previous work experience in a Biopharma organization is a plus.
 * Previous work experience in a cloud centric environment is a plus.

## Description

The Senior Director, Head of Security Operations is a mission-critical leader responsible for safeguarding the integrity of Gilead's scientific data, digital assets, and operational environments. Reporting to the CISO, this role will direct the teams that provide operational excellence for enterprise security capabilities that protect employees, patients, and the research that fuels Gilead's innovation. Partnering closely with Gilead's Managed Service Providers (MSPs), this role will lead the team to provide measurable operational results to support Gilead business outcomes. As a senior member of the cross-functional Security Risk and Compliance organization, this leader will partner closely across Security Architecture, Engineering, Project delivery, Risk, Data Privacy, QA, Infrastructure, Network, and Business IT to translate complex and often ambiguous security requirements into clear guidance, ensuring the organization can innovate confidently while maintaining a strong
security posture.

This is a site-based role in Foster City, CA at our global headquarters. Remote work is not available for this position. We do offer optional work from home days on Monday and Friday with core collaboration days in the office.

This position sits at the forefront of Gilead's digital and AI-driven transformation and is uniquely positioned to support and secure the next generation of research platforms and data environments that accelerate the development and delivery of lifesaving therapies. The Head of Security Operations combines deep expertise in security policy, regulatory compliance, technology strategy, and MSP management practices with the ability to navigate ambiguity and influence senior stakeholders. This leader will ensure that the business is aware and understand the importance of security across the enterprise, help business and other stakeholders to follow and comply with security, risk and compliance requirements., * Strategic mindset with the ability to execute: Define and deliver against security strategies, especially in Identity and Access Management, to protect Gilead, implements automation, and drives for operational efficiencies.

 * Technology Strategy and Delivery: Position Security as a key requirement to support business operations and understand the value of scalable and efficient technical solutions that provide visibility to threats and allows team the ability to quickly respond to and block threats with low operational overhead and technical debt.
 * Business Partnership: Serve as a trusted advisor to leaders within Business functions and IT and supports their mission. Partner with senior IT Security leadership to create technology strategies that support the objectives of their functions. Understand the value drivers of the Business and ensures IT Security solutions consider the balance between Security and User experience. Strong ability to partner with Managed Service providers and manage them to agree upon outcomes.
 * Leadership: Proven ability to build, develop, and lead teams and rally organization around the vision., * Define and execute a multi-year Security Operations strategy and roadmap, aligning operational capabilities, automation, incident response, identity security, vulnerability management, application security and MSP performance to Gilead's enterprise risk posture, digital transformation and business strategies.
 * Lead and manage the Security Operations function to provide operational excellence across all Security domains including Identity and Access Management, Endpoint Security, Network Security, Platform Security, and application security.
 * Lead and manage the Security Identity and Access Management team to deliver key Identity Security capabilities.
 * Lead and manage our Managed Service Provider (MSP) Operations team. Establish and monitor OKRs, KPIs, service levels and risk-reduction metrics.
 * Own operational budget planning, vendor performance, service cost transparency and cost-of-ownership optimization for Security Operations. Make informed trade-off decisions across risk reduction, operational resilience, user experience, cost and business need.
 * Lead continuous improvement and automation activities to reduce overall operational overhead, improve response times and strengthen cyber resilience.
 * Represent Security Operations in enterprise governance, leadership risk discussions, audit and compliance forums, and major IT initiatives.
 * Advise senior leaders on operational security risks, investment trade-offs and response priorities that affect Gilead-wide resilience. Leads a high-performing, inclusive Security Operations organization that develops and retains talent, encourages innovation and enables accountable, resilient and scalable delivery.
 * Maintain awareness of evolving cyber threats, regulatory expectations, security operations practices and peer benchmarks, bringing relevant insights into Gilead to inform roadmap decisions and operational priorities.
 * Support Merger & Acquisition related activities.
 * Lead and manage our application security team, including SAST/DAST application testing, penetration testing, security remediation, and tabletop exercises
 * Ensure IT activities, processes, and procedures meet defined requirements, policies and regulations.
 * Work with Internal Audit, Project Managers, System Managers and Engineers - Track project findings, identify and resolve issues, analyze evidence, communicate with stakeholders, and facilitate the completion of cybersecurity related projects.
 * Participate in other activities relating to information security or other functional areas as assigned.


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Tokenization of Everything: Where the Real World Meets Blockchain](https://www.wearedevelopers.com/videos/1035-tokenization-of-everything-where-the-real-world-meets-blockchain)
- [Fighting the Next Wave of Cybercrime](https://www.wearedevelopers.com/videos/100331-fighting-the-next-wave-of-cybercrime)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Blueprints for Success: Steering a Global Data & AI Architecture](https://www.wearedevelopers.com/videos/1577-blueprints-for-success-steering-a-global-data-ai-architecture)
- [Run on Bitcoin](https://www.wearedevelopers.com/videos/29-run-on-bitcoin)

## Related Articles

- [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market)
- [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers)
- [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries)