director of application cloud security

Our client, is one of the world’s leading biopharmaceutical companies, dedicated to discovering, developing, and delivering innovative medicines and vaccines that improve and extend patients’ lives. With a presence in more than 100 countries and a history spanning over 175 years, our client combines cutting-edge science, technology, and global expertise to address some of the world’s most challenging healthcare needs. The company fosters a culture of innovation, collaboration, and continuous learning, empowering its people to drive breakthroughs that make a meaningful impact on global health.

Join a global leader in pharmaceuticals, and immerse yourself in a dynamic experience where you’ll contribute to groundbreaking projects that impact the lives of millions!

Language Requirement: English, Greek

Minimum Years of Experience: 10

Key Responsibilities

• Lead the application cloud security function, defining strategy, priorities, and roadmaps for securing software, APIs, and digital products across cloud, web, mobile, and enterprise application domains.

• Design and maintain scalable application cloud security programs and secure development practices that support digital products, platforms, and global business operations while meeting regulatory and compliance obligations.

• Oversee the selection, deployment, and lifecycle management of application cloud security tooling (e.g., SAST, DAST, SCA, and API security), ensuring controls are effective, resilient, and consistently applied across the SDLC.

• Partner with Digital, Cloud Services, and Cyber Defense leadership to integrate security into product development, CI/CD pipelines, and modernization initiatives.

• Establish secure coding standards, reference architectures, and guardrails aligned to enterprise risk management and application cloud security frameworks (e.g., OWASP, NIST SSDF).

• Lead and develop high performing application cloud security teams, fostering strong technical depth, accountability, and continuous improvement.

• Provide executive level reporting and risk insights to Cyber Defense leadership on application risk posture, vulnerability trends, and remediation priorities. Oversee enterprise-wide Vulnerability Management and Threat Intelligence programs.

Required Qualifications

• Bachelor’s degree in Cloud Security, Cybersecurity, Computer Science, Information Systems, or related field

• 10+ years of progressive experience in cybersecurity and application cloud security, including building and leadership of enterprise scale application security programs and teams.

• 5+ years of leadership experience managing security teams or programs
  Demonstrated experience designing and operating application cloud security controls across cloud, web, mobile, API, and DevSecOps domains.

• Proven ability to translate application cloud security risk into clear technical and business outcomes for senior leadership.

• Strong background in governance, risk management, and compliance frameworks (ISO 27001, NIST, FDA regulations, GxP).

Nice-to-Have Skills

• Professional certifications: CISSP, CCNP, GIAC, or similar

• Familiarity with application cloud security frameworks and standards (e.g., OWASP ASVS/SAMM, NIST SSDF, Zero Trust architectures).

• Excellent strategic thinking.

• Deeply analytical and credible.

• Ability to challenge, influence, and support senior leadership.

• Excellent communication and presentation skills.

• Ability to bring structure to vaguely defined problems and solve them with creative yet pragmatic approaches.

• Resourceful, self-motivated, and proactive – strong drive for excellence.

• Professional certifications such as CISSP, CISM, GIAC, CCNA, or CCNP.

• Previous experience leading global Cyber Security transformation programs.