Head of Information Security

About Accumulus Technologies

Accumulus Technologies helps life sciences companies reduce regulatory friction, shorten timelines, and lower execution risk across product development and lifecycle management—delivering measurable and transformational ROI. We support the full spectrum of regulatory engagements—strategy, submissions, and lifecycle management—spanning CMC, clinical and nonclinical content, labeling, commitments, post-approval changes, and reliance/work-sharing models. Our focus is commercial impact: faster approvals, smoother post-approval change execution, fewer surprises, and tighter alignment between commitments and what teams can deliver. Our clients measure the value we bring in the tens of millions.
Job Description

Accumulus Technologies is seeking a Head of Information Security to lead the company’s information security function across corporate operations and the Accumulus Platform. Reporting directly to the Chief Operating Officer, with direct access to executive leadership and the Board on material security matters, this leader will set security strategy, oversee governance, risk, and compliance, and represent Accumulus’ security posture to customers, regulators, and other external stakeholders.

You will lead the CyberDefense, Product Security, and GRC teams. Working with Engineering, Product, DevOps, IT, Legal, and Commercial, you will translate business priorities and security risks into a practical roadmap, establish clear control ownership, and hold teams accountable for delivery.

This is a strategic and hands-on leadership opportunity for a security leader who combines technical judgment, operational discipline, and clear communication to protect the business, sustain assurance commitments, and build customer trust.
Responsibilities

- Own the corporate and product information security strategy, program, and annual objectives; define a prioritized roadmap and align security resources and investment needs with the COO.

- Own the evolution of Accumulus’ technical security capabilities across cloud infrastructure, product security, identity, vulnerability management, detection and response, and security architecture, prioritizing investment according to material business and cyber risk.

- Lead and develop the CyberDefense and Product Security teams; set priorities, performance expectations, and accountability for internal staff and external providers.

- Oversee the GRC program and delivery of audit coordination, evidence collection, policies, assessments, remediation tracking, and Vanta administration; retain accountability for program outcomes.

- Maintain audit readiness and oversee required audits, certifications, and attestations, prioritizing current commitments and the effective operation of supporting controls.

- Review material cyber risks, challenge risk ratings and treatment plans, approve security exceptions within delegated authority, and escalate business risk acceptance to executive leadership.

- Partner with Engineering, Product, DevOps, and IT leadership to embed security in architecture, development, and operations; hold control owners accountable for effective safeguards and timely remediation.

- Provide senior security direction during material incidents, authorize escalations, oversee lessons learned, and ensure incident response, disaster recovery, and business continuity capabilities are tested with accountable teams.

- Resolve cross-functional security decisions affecting delivery, customer commitments, or business risk; escalate unresolved tradeoffs and investment needs to the COO and executive leadership.

- Report security posture, material risks, incidents, remediation performance, emerging threats, and investment priorities to executive leadership and the Board, as appropriate.

- Serve as Accumulus’ senior security representative with customers, prospects, regulators, auditors, partners, and insurers; clearly explain the company’s architecture, controls, cert