Director, IT Security

Company Overview
ImmunityBio, Inc. (NASDAQ: IBRX) is a commercial-stage biotechnology company developing cell and immunotherapy products that are designed to help strengthen each patient’s natural immune system, potentially enabling it to outsmart the disease and eliminate cancerous or infected cells. We envision a day when we no longer fear cancer, but can conquer it, thanks to the biological wonder that is the human immune system. Our scientists are working to develop novel therapies that harness that inherent power by amplifying both branches of the immune system, attacking cancerous or infected cells today while building immunological memory for tomorrow. The goal: to reprogram the patient’s immune system and treat the host rather than just the disease.

Why ImmunityBio?
• ImmunityBio is developing cutting-edge technology with the goal to transform the lives of patients with cancer and develop next-generation therapies and vaccines that complement, harness and amplify the immune system to defeat cancers and infectious diseases.
• Opportunity to join a publicly traded biopharmaceutical company with headquarters in Southern California.
• Work with a collaborative team with the ability to work across different areas of the company.
• Ability to join a growing company with professional development opportunities.

Position Summary

The Director of Security is responsible for designing, implementing, and leading a comprehensive physical security program for a multi-site corporate environment, with alignment and collaboration with Information Security for corporate offices and critical spaces. The primary focus is protecting employees, executives, facilities, and physical assets through robust policies, technologies, and daily operational practices, while partnering with IT to safeguard systems housed in corporate spaces.

Essential Functions

• Design, implement, and oversee physical security systems for offices and campuses, including access control, CCTV, intrusion detection, duress systems, and visitor management platforms.
• Participate in the development and implementation of the enterprise security architecture and supporting security standards to ensure compliance with corporate policies, and relevant legislative and regulatory requirements.
• Manage the day-to-day activities of the team to include the hiring and training of new team members, coaching employees and monitoring performance
• Review and determine risks within the environment and recommend security products and/or processes to assist in mitigating risks.
• Monitor information systems for security incidents and vulnerabilities including the development of monitoring and visibility capabilities, report on incidents, vulnerabilities, and trends.
• Respond to information system security incidents, including investigation of, countermeasures to, and recovery from computer-based attacks, unauthorized access, and policy breaches including interacting and collaborating with third-party incident responders.
• Administer authentication and access controls, including provisioning, changes, and deprovisioning of user and system accounts, security/access roles, and access permissions to information assets.
• Analyze trends, news and changes in threat and compliance environment with respect to organizational risk and advise management and develop and execute plans for compliance and mitigation of risk.
• Perform risk and compliance self-assessments and engages and coordinates third-party risk and compliance assessments.
• Perform comprehensive threat/risk assessments and business impact analysis of current system, data, application and technology environments to determine possible internal and external threats to information assets and identify security measures required to counter such threats.
• Perform comprehensive threat/risk assessments and business impact analysis of current system, data, application and technology environments to determine possible internal and external threats to information assets and identify security measures required to counter such threats.
• Create, edit and adhere to Standard Operating Procedures (SOPs), process improvements, and standardization of templates.
• Performs ad-hoc and cross-functional duties and/or projects  assigned to support business needs and provide developmental opportunities.

Education & Experience

• Bachelor’s degree in information technology or related field with 10+ years of industry related experience is required; OR
• High School Diploma with 14+ years of industry related experience is required
• 10+ years of experience with computer hardware for storage, desktops, and servers is required.
• 10+ years of experience with Routers, Firewalls, Switches, DNS, and DHCP is required.
• 10+ years of experience with access control systems, CCTV including installation, configuration, and best practices are required.

Knowledge, Skills, & Abilities

• Knowledge of data analysis, correlation, anomaly detection, and threat hunting (red, purple, blue team).
• Strong knowledge of security best practices
• Deep understanding of information security best practices
• Knowledge of basic computer hardware for both desktops and servers
• Knowledge of Palo Alto or Cisco firewall technologies
• Knowledge of Routers, Firewalls, Switches, DNS, and DHCP
• Knowledge of data analysis, correlation, anomaly detection, and threat hunting (red, purple, blue team)
• Strong understanding of TCP/IP, subnetting, routing, access control lists, firewalls, Site-to-Site and Client VPN, NAT and network traffic analysis, and edge configurations
• Strong Knowledge of routing protocols such as OSPF, BGP and static routes
• Ability to work in a dynamic and demanding environment and make decisions quickly

Working Environment / Physical Environment

• The position will work onsite or remote based on the candidate’s geographic location.
• Regular work schedule is Monday – Friday, within standard business hours.  Flexibility is available with manager approval.
• Must possess mobility to work in a standard office setting and to use standard office equipment, including a computer.
• Lift and carry materials weighing up to 20 pounds.

The application window is anticipated to close on 60 days from when it is posted or sooner if the position is filled or closed.

ImmunityBio employees are as valuable as the people we serve. We have built a resource of robust benefit offerings to best support the total wellbeing of our team members and their families. Our competitive total rewards benefits package, for eligible employees, include: Medical, Dental and Vision Plan Options • Health and Financial Wellness Programs • Employer Assistance Program (EAP) • Company Paid and Voluntary Life/AD&D, Short-Term and Long-Term Disability • Healthcare and Dependent Care Flexible Spending Accounts • 401(k) Retirement Plan with Company Match • 529 Education Savings Program • Voluntary Legal Services, Identity Theft Protection, Pet Insurance and Employee Discounts, Rewards and Perks • Paid Time Off (PTO) includes: 11 Holidays • Exempt Employees are eligible for Unlimited PTO • Non-Exempt Employees are eligible for 10 Vacation Days, 56 Hours of Health Pay, 2 Personal Days and 1 Cultural Day •  We are committed to providing you with the tools and resources you need to optimize your Health and Wellness.

At ImmunityBio, we are an equal opportunity employer dedicated to diversity in the workplace. Our policy is to provide equal employment opportunities to all qualified persons without regard to race, gender, color, disability, national origin, age, religion, union affiliation, sexual orientation, veteran status, citizenship, gender identity and/or expression, or other status protected by law.