Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now

Tailor your resume to this Associate Director/Director, Information Security role.

Rezi rewrites your resume against Axsome Therapeutics's job description. Free.

Resume score gauge reading 58 out of 100

Don't guess if your resume is good enough.

See how it scores against the Associate Director/Director, Information Security posting at Axsome Therapeutics — free, in seconds.

About the Role

Axsome Therapeutics is seeking an Associate Director/Director Information Security to lead threat management, incident response, and vulnerability management. This hands-on leader will direct the cybersecurity team and service providers, execute the corporate Information Security Program, and maintain security posture during non-standard hours, including active weekend and evening monitoring and rapid response to high-priority security incidents.

Responsibilities

Lead security monitoring and detection across MSP, SIEM, IDS/IPS, and the broader security toolset; personally triage, analyze, and escalate high-severity alerts
Set alert prioritization and detection-engineering standards; directly tune detections, correlation rules, and use cases to improve signal quality
Perform hands-on threat hunting with advanced techniques and tooling; operationalize hunting strategies and resulting mitigations
Drive continuous improvement of security controls based on threat intelligence, hunt findings, and incident trends
Act as incident lead for significant business-impact security events, leading identification, containment, eradication, and recovery — including direct investigation and forensic analysis
Maintain and mature incident response plans, runbooks, and playbooks; alert optimization; design and lead tabletop exercises to validate readiness
Lead post-incident reviews, author executive-facing reports, and drive remediation of process and control gaps
Lead the vulnerability management program; execute or validate scans, analyze results, and confirm remediation
Apply risk-based prioritization and remediation SLAs aligned to business impact; report progress and residual risk
Partner with IT Infrastructure & Operations and Application Development to drive timely patching and configuration hardening
Manage the cybersecurity vendor and MSP relationships; ensure effective service delivery and enforce SLAs
Define provider KPIs; lead service reviews and drive continuous improvement
Manage the Third-Party Risk Management (TPRM) program — vendor assessments, risk ratings, contract security requirements, and remediation tracking
Oversee the cybersecurity awareness and training program; champion best practices, measure effectiveness, and drive improvements
Support security audits and contribute to the continuous improvement of security policies, standards, and procedures within the corporate InfoSec Management System
Manage the InfoSec project portfolio and directly contribute to technical workstreams as needed
Manage, mentor, and develop cybersecurity team members while modeling hands-on technical excellence
Support data protection initiatives including data classification, DLP monitoring, SaaS security assessments, and insider risk investigations
Investigate potential data leakage events and coordinate containment activities
Oversee security requirements related to identity governance, privileged access management (PAM), multifactor authentication (MFA), conditional access, and account lifecycle controls
Review privileged-access risks and support periodic access recertifications
Support cloud security monitoring, hardening, and governance across Microsoft 365, Azure, and AWS environments
Assist in reviewing and remediating cloud security posture findings, misconfigurations, excessive permissions, and identity-related risks
Partner with Infrastructure teams to implement Zero Trust security controls
Develop and maintain cybersecurity KPIs, KRIs, and executive dashboards
Present operational security metrics, risk trends, and program maturity updates to leadership

Requirements

Bachelor’s degree in computer science, Information Security, or a related field
8–10 years of progressive information security experience, including 3+ years leading security operations, incident response, or security engineering functions
Demonstrated hands-on proficiency with SIEM platforms, EDR/endpoint security, email security, and vulnerability management tooling
Hands-on experience with network, cloud and SaaS security, particularly in AWS, Azure, Microsoft 365, Defender and Windows ecosystem
Proven experience as an incident commander, performing hands-on investigation, containment, and forensics
Experience managing MSPs/MSSPs and third-party risk programs, including SLA enforcement and vendor performance management
Working knowledge of security frameworks and standards (NIST CSF, CIS Controls, ISO 27001) and audit/compliance processes
Ability to proactively plan, organize, deliver with limited oversight, prioritize, and quickly adapt to changing situations
Strong collaboration and negotiation skills, with a high degree of self-motivation, and ability to work independently with minimal supervision
Strong attention to detail and a meticulous approach to security-related tasks
Strong analytical skills and the ability to translate technical risk into business terms for leadership audiences
Ability to support non-standard hours, including active evening/weekend monitoring and rapid response to high-priority incidents as needed
Ability to work on-site Monday, Tuesday & Thursday
Scripting and automation skills (e.g., PowerShell, Python) for detection tuning, remediation, and deployment
Proficient in security tools: CrowdStrike Falcon and NextGEN SIEM, Microsoft Defender and KnowBe4
Experience contributing to a formal Information Security Program or Management System (e.g., ISO 27001 ISMS)
Player-coach leadership — balances team development and program execution with direct technical contribution
Sound risk judgment and the ability to prioritize under pressure during active incidents
Strong written and verbal communication, including executive-level reporting
Collaboration across IT, application development, and business stakeholders

Skills

Threat management
Incident response
Vulnerability management
Security monitoring
SIEM
IDS/IPS
Threat hunting
Forensic analysis
Risk management
Vendor management
Third-Party Risk Management (TPRM)
Data protection
Insider risk
Identity and Access Management (IAM)
Privileged Access Management (PAM)
Multifactor Authentication (MFA)
Cloud security
Zero Trust security
Cybersecurity awareness and training
Security audits
Security policies and standards
Security metrics and reporting
Scripting (PowerShell, Python)
CrowdStrike Falcon
NextGEN SIEM
Microsoft Defender
KnowBe4
NIST CSF
CIS Controls
ISO 27001

Location

New York City

Work Type

On-site (at least three days per week)

Experience Level

Associate Director/Director
8-10 years of information security experience
3+ years leading security operations, incident response, or security engineering functions

Education Level

Bachelor’s degree in computer science, Information Security, or a related field
CISSP, CISM, CISA, GIAC (GCIH / GCIA / GCFA), or equivalent certifications

Salary/Compensations

$170,000 - $220,000

Benefits

Annual bonus
Significant equity
Generous benefits package

About the Company

Axsome Therapeutics is a biopharmaceutical company focused on treating central nervous system (CNS) conditions.
They deliver scientific breakthroughs by identifying critical gaps in care and develop differentiated products with a focus on novel mechanisms of action.
Their portfolio includes FDA-approved treatments for major depressive disorder, excessive daytime sleepiness associated with narcolepsy and obstructive sleep apnea, and migraine.
They have multiple late-stage development programs addressing a broad range of serious neurological and psychiatric conditions.
Their mission is to solve significant brain-related problems so patients and their loved ones can flourish.

Equal Opportunity

Axsome is committed to equal employment opportunity and providing reasonable accommodations to applicants with physical and/or mental disabilities.
They value and encourage diversity and solicit applications from all qualified applicants without regard to race, color, gender, sex, age, religion, creed, national origin, sexual orientation, gender identity, ancestry, citizenship, marital status, physical or mental disability, medical condition, veteran status, genetic information, or any other characteristic protected by federal, state, or local law.