Senior Manager, IT Information Security

About this role

Company introduction:

Compass Pathways plc (Nasdaq: CMPS) is a biotechnology company dedicated to accelerating patient access to evidence-based innovation in mental health. The Company is headquartered in London, UK, with offices in New York City in the US. We focus on developing novel treatments that have the potential to improve the lives of those who are suffering with mental health conditions and who are not helped by current treatments.

We are pioneering a new paradigm for treating mental health conditions focused on rapid and durable responses through the development of our investigational COMP360 synthetic psilocybin treatment, potentially a first in class treatment. COMP360 has Breakthrough Therapy designation from the US Food and Drug Administration (FDA) and has received Innovative Licensing and Access Pathway (ILAP) designation in the UK for treatment-resistant depression (TRD) due to the pressing unmet need in this area.

We are currently in phase 3 for TRD, have completed phase 2 studies for both post-traumatic stress disorder (PTSD) and anorexia nervosa and are planning a further late-stage study in PTSD. We envision a world where mental health means not just the absence of illness but the ability to thrive. - Compass Pathways.

Job overview:

Compass Pathways is entering a critical phase as we prepare for commercial launch and expansion of our data and technology footprint. We are seeking a hands-on, execution-focused Senior Manager, IT Information Security to lead the development, implementation, and day-to-day operation of the company’s cybersecurity program.

This role is responsible for protecting company systems, data, and users, ensuring compliance with regulatory requirements (including GxP, SOX ITGCs, and data privacy obligations), and strengthening the organization’s security posture as we scale.

The role operates with a high degree of ownership while collaborating closely with IT leadership, and external partners.

Reports to: VP, Information Technology.

Location: US (East Coast) or UK (London area).

Roles and responsibilities
(Include but are not limited to):

• Security Program Leadership & Execution

• Lead implementation and improvement of the cybersecurity program

• Develop security policies, standards, and procedures

• Support transition to a risk-based security model

• Threat Detection, Monitoring & Incident Response

• Oversee monitoring and alerting with SOC partners

• Manage incident response processes and reporting

• Coordinate response and reporting of security events

• Vulnerability Management & Security Operations

• Lead vulnerability management lifecycle

• Partner with IT teams on remediation

• Ensure controls across endpoints, cloud, and applications

• Support identity and access controls

• Establish and manage cyber security KPI’s and…