Vice President, IT Resilience & Trust

Key Responsibilities

Resilience & Trust Strategy

• Define and execute Madrigal's integrated Resilience & Trust strategy and multi-year roadmap across infrastructure, cybersecurity, technology compliance, service management, and resilience.
• Translate business growth, international expansion, regulatory requirements, technology trends, and emerging risks into clear priorities, standards, roadmaps, and investment decisions.
• Establish target architectures, operating principles, and risk-based technology guardrails that enable speed and innovation while maintaining appropriate reliability, security, compliance, and resilience.
• Partner with AI, digital, data, and other technology leaders to establish practical control, security, monitoring, and assurance expectations, and develop a repeatable technology foundation for global expansion.
• Establish a data-driven operating cadence across Resilience & Trust, manage investment tradeoffs, and serve as a trusted advisor to the CIO and IT Leadership Team.

Infrastructure & Reliability

• Provide executive leadership for infrastructure, workplace technology, enterprise service management, and technology operations.
• Define and evolve the strategy for cloud, networks, workplace, identity and access, endpoints, collaboration, and other foundational technology services.
• Build an enterprise-grade service management model and establish common ITSM practices across infrastructure, applications, digital products, data platforms, and key providers.
• Mature the ITSM platform, service ownership model, CMDB/service mapping, and core disciplines including incident, problem, change, request, knowledge, configuration, and service-level management.
• Establish measurable service levels, customer experience measures, observability, and operational health metrics.
• Own technology resilience and major incident management, including disaster recovery, RTO/RPO, dependency mapping, testing, cross-functional recovery coordination, and executive communication.

Cybersecurity & Technology Risk

• Provide executive accountability and strategic direction for Madrigal's cybersecurity program, leading the Head of Cybersecurity.
• Embed cybersecurity standards and controls into architecture, infrastructure, applications, vendors, acquisitions, international expansion, and major transformation initiatives.
• Establish cybersecurity and technology risk expectations for emerging technologies, including AI.
• Maintain effective oversight across identity and access, vulnerability management, monitoring, threat detection and response, endpoint and infrastructure security, sensitive information protection, and third-party technology risk.
• Ensure cyber risks and incidents are assessed, prioritized, communicated, and addressed based on business impact.

Technology Compliance & Governance

• Provide executive leadership for Madrigal's technology compliance capability and establish a scalable, risk-based control environment.
• Define governance frameworks, technology controls, standards, and operating practices that support regulatory requirements, company policies, and risk-management expectations.
• Partner closely with Quality to maintain appropriate lifecycle compliance for regulated and GxP technology systems, including CSV/CSA, 21 CFR Part 11, data integrity, validation, audit readiness, and inspection support.
• Partner with Finance, Internal Audit, Privacy, Legal, and other stakeholders to ensure technology controls supporting SOX, privacy, cybersecurity, data protection, and other enterprise requirements are clearly owned and effectively operated.
• Establish risk-based governance and meaningful measures of control effectiveness, compliance posture, remediation progress, technology risk, and audit/inspection readiness.
• Ensure material compliance risks and control deficiencies have clear owners, remediation plans, escalation paths, and timely closure.

Leadership, Capability Building & Cross Functional Partnership

• Lead, develop, and integrate the Infrastructure, Cybersecurity, and Technology Compliance leaders and teams into a cohesive Resilience & Trust organization.
• Raise the maturity of the organization through clear expectations for strategy, roadmaps, service ownership, metrics, risk management, executive communication, and continuous improvement.
• Develop functional leaders, assess organizational capability as needs evolve, and make appropriate changes to talent, structure, sourcing, and operating models.
• Manage budgets, investments, vendors, managed service providers, and resources across the Resilience & Trust portfolio.
• Partner across the IT Leadership Team and with International and other key stakeholders to embed reliability, cybersecurity, compliance, resilience, service management, and consistent technology standards into delivery and global growth.
• Provide clear executive visibility into service health, resilience, cybersecurity, compliance, significant incidents, risks, resource constraints, and investment needs.

Qualifications

Education: Bachelor's degree in Computer Science, Information Systems, Engineering, or a related discipline required. Advanced degree such as an MBA, MS, or related graduate degree preferred. An equivalent combination of education and highly relevant experience may be considered.

Experience: Prior experience serving as a Chief Information Security Officer (CISO) for a publicly traded company strongly preferred. Typically 20+ years of progressive technology leadership experience. Experience in a regulated environment; pharmaceutical, biotechnology, life sciences, healthcare, or another highly regulated industry strongly preferred.

Skills & Competencies: Strong executive presence, business judgment, and credibility with senior business and technology leaders. Enterprise-oriented thinker. Strong operational leader who establishes clear management systems, metrics, and accountability. Customer- and service-oriented. Effective leader of leaders. Strong collaborator and communicator.