Associate Director/Director, Information Security

The role

This leader directs the cybersecurity team and service providers while performing hands-on technical work. The role executes the corporate Information Security Program and maintains security posture through monitoring and incident response.

What you will do

• Lead security monitoring and detection across MSP, SIEM, IDS/IPS, and security toolset
• Perform hands-on threat hunting and tune detections
• Act as incident lead for significant business-impact security events
• Maintain and mature incident response plans, runbooks, and playbooks
• Lead the vulnerability management program
• Manage cybersecurity vendor and MSP relationships
• Manage the Third-Party Risk Management (TPRM) program
• Oversee the cybersecurity awareness and training program
• Support data protection initiatives and insider risk investigations
• Oversee identity and access security requirements

Required qualifications

• Bachelor’s degree in computer science, Information Security, or a related field
• 8–10 years of progressive information security experience
• 3+ years leading security operations, incident response, or security engineering functions
• Hands-on proficiency with SIEM platforms, EDR/endpoint security, email security, and vulnerability management tooling
• Hands-on experience with network, cloud and SaaS security, particularly in AWS, Azure, Microsoft 365, Defender and Windows ecosystem
• Experience as an incident commander, performing hands-on investigation, containment, and forensics
• Experience managing MSPs/MSSPs and third-party risk programs
• Working knowledge of security frameworks and standards (NIST CSF, CIS Controls, ISO 27001) and audit/compliance processes
• Ability to support non-standard hours, including active evening/weekend monitoring and rapid response
• Ability to work on-site Monday, Tuesday & Thursday

Nice to have

• Scripting and automation skills (e.g., PowerShell, Python)
• Proficient in security tools: CrowdStrike Falcon and NextGEN SIEM, Microsoft Defender and KnowBe4
• Relevant certifications: CISSP, CISM, CISA, GIAC (GCIH / GCIA / GCFA), or equivalent
• Experience contributing to a formal Information Security Program or Management System (e.g., ISO 27001 ISMS)
• Player-coach leadership

Benefits

• Annual bonus
• Significant equity
• Generous benefits package

About the company

Axsome Therapeutics is a biopharmaceutical company leading a new era in the treatment of central nervous and neurological conditions. They focus on developing differentiated products with novel mechanisms of action to improve patient outcomes.