Senior Manager, IT Information Security

About this role

<div class="content-intro"><p><span style="font-size: 14pt;"><strong>Company introduction:</strong></span></p> <p><span style="font-size: 12pt;">Compass Pathways plc (Nasdaq: CMPS) is a biotechnology company dedicated to accelerating patient access to evidence-based innovation in mental health. The Company is headquartered in London, UK, with offices in New York City in the US. We focus on developing novel treatments that have the potential to improve the lives of those who are suffering with mental health conditions and who are not helped by current treatments.   </span></p> <p><span style="font-size: 12pt;">We are pioneering a new paradigm for treating mental health conditions focused on rapid and durable responses through the development of our investigational COMP360 synthetic psilocybin treatment, potentially a first in class treatment. COMP360 has Breakthrough Therapy designation from the US Food and Drug Administration (FDA) and has received Innovative Licensing and Access Pathway (ILAP) designation in the UK for treatment-resistant depression (TRD) due to the pressing unmet need in this area. </span></p> <p><span style="font-size: 12pt;">We are currently in phase 3 for TRD, have completed phase 2 studies for both post-traumatic stress disorder (PTSD) and anorexia nervosa and are planning a further late-stage study in PTSD. We envision a world where mental health means not just the absence of illness but the ability to thrive. - </span><a style="font-size: 12pt;" href="https://compasspathways.com/">Compass Pathways</a><span style="font-size: 12pt;">.</span></p></div><p><span style="font-size: 14pt;"><strong>Job overview:</strong></span></p> <p><span style="font-size: 12pt;">Compass Pathways is entering a critical phase as we prepare for commercial launch and expansion of our data and technology footprint. We are seeking a hands-on, execution-focused Senior Manager, IT Information Security to lead the development, implementation, and day-to-day operation of the company’s cybersecurity program.</span></p> <p><span style="font-size: 12pt;">This role is responsible for protecting company systems, data, and users, ensuring compliance with regulatory requirements (including GxP, SOX ITGCs, and data privacy obligations), and strengthening the organization’s security posture as we scale.</span></p> <p><span style="font-size: 12pt;">The role operates with a high degree of ownership while collaborating closely with IT leadership, and external partners.</span></p> <p><strong><span style="font-size: 14pt;">Reports to:</span></strong> <span style="font-size: 12pt;">VP, Information Technology.</span></p> <p><span style="font-size: 14pt;"><strong>Location:</strong></span> <span style="font-size: 12pt;">US (East Coast) or UK (London area).</span></p> <p><span style="font-size: 14pt;"><strong>Roles and responsibilities <br></strong>(<em>Include but are not limited to</em>): </span></p> <ul> <li style="font-size: 12pt;"><strong><span style="font-size: 12pt;">Security Program Leadership & Execution</span></strong> <ul> <li style="font-size: 12pt;"><span style="font-size: 12pt;">Lead implementation and improvement of the cybersecurity program</span></li> <li style="font-size: 12pt;"><span style="font-size: 12pt;">Develop security policies, standards, and procedures</span></li> <li style="font-size: 12pt;"><span style="font-size: 12pt;">Support transition to a risk-based security model</span></li> </ul> </li> <li style="font-size: 12pt;"><strong><span style="font-size: 12pt;">Threat Detection, Monitoring & Incident Response</span></strong> <ul> <li style="font-size: 12pt;"><span style="font-size: 12pt;">Oversee monitoring and alerting with SOC partners</span></li> <li style="font-size: 12pt;"><span style="font-size: 12pt;">Manage incident response processes and reporting</span></li> <li style="font-size: 12pt;"><span style="font-size: 12pt;">Coordinate response and reporting of security events</span></li> </ul> </li> <li style="font-size: 12pt;"><strong><span style="font-size: 12pt;">Vulnerability Management & Security Operations</span></strong> <ul> <li style="font-size: 12pt;"><span style="font-size: 12pt;">Lead vulnerability management lifecycle</span></li> <li style="font-size: 12pt;"><span style="font-size: 12pt;">Partner with IT teams on remediation</span></li> <li style="font-size: 12pt;"><span style="font-size: 12pt;">Ensure controls across endpoints, cloud, and applications</span></li> <li style="font-size: 12pt;"><span style="font-size: 12pt;">Support identity and access controls</span></li> <li style="font-size: 12pt;"><span style="font-size: 12pt;">Establish and manage cyber security KPI’s and…