Manager, Information Security

About Stoke:

Stoke Therapeutics (Nasdaq: STOK), is a biotechnology company dedicated to addressing the underlying cause of severe diseases. The company is pursuing an entirely new approach to treating severe diseases. We are initially focused on diseases of the central nervous system and the eye, with an emphasis on haploinsufficiencies, which are diseases caused by a loss of about half of the normal protein levels. Rather than replace, repair or edit faulty genes, we aim to increase - or stoke - protein output from healthy genes to restore functional protein levels using our proprietary TANGO (Targeted Augmentation of Nuclear Gene Output) platform. In all, Stoke has identified ~6500 genes with a TANGO signature, representing broad potential for our approach to help people with severe diseases.

We recently announced landmark data that support the potential for STK-001 to be the first disease-modifying medicine for Dravet syndrome, a severe and progressive genetic epilepsy that is characterized by frequent, prolonged and refractory seizures, beginning within the first year of life. The disease is classified as a developmental and epileptic encephalopathy due to the developmental delays and cognitive impairment associated with the disease.

Stoke is also advancing STK-002, a potential treatment for autosomal dominant optic atrophy (ADOA), the most common inherited optic nerve disorder. Currently there are no approved treatments for ADOA. Clinical studies of STK-002 are anticipated to start in 2024. The company is pursuing potential new medicines for three additional neurodevelopmental disorders, including Syngap1 and Rett syndrome, in collaboration with Acadia Pharmaceuticals.

Position Purpose:

The Information Security Manager will help drive cybersecurity programs, operations, and architecture. This position will report into the Vice President, Head of IT.

Key Responsibilities:

• Co-develop cybersecurity strategies and policies.
• Manage internal and external, including supply chain, cybersecurity risks.
• Lead security assessments, penetration testing, incident management.
• Design, build, and run cybersecurity programs.
• Integrate and implement security into applications and systems.
• Design and implement identity and access management capabilities.
• Deliver cybersecurity culture change, awareness, and training.
• Perform continuous monitoring activities such as using SIEM tools, APT hunting, implementing UBA, etc.
• Design / implement vulnerability management, including conducting vulnerability assessments.

Required Skills & Experience:

• 6+ years of practical experience in cybersecurity operations and management, both technical and program level.
• BS in cybersecurity, information systems, mathematics, or similar degree.
• Strong knowledge of information systems security concepts and current information security/privacy trends and practices.
• Must be able to prepare formal reports and presentations as needed.
• Strong business and technical skills in the planning, administration, and management of information systems, operational and technical security controls; and security risk analysis and management.
• Manage conflict and difficult issues in a professional, assertive and proactive manner. Ability to build strong partnerships at all levels, internal and/or external to the organization.
• Deep experience with Microsoft Entra, Office 365 services, and MS security functions such as multi-factor, Conditional Access, Defender, Sentinel, Sensitivity Labels, etc.
• Strong working knowledge of Palo Alto firewalls, Cisco switches and access points, and VMware and open-source hypervisors.
• Knowledge of FDA CFR 21 part 11, HIPAA, SOX, GDPR, CCPA, and other relevant regulations and compliance frameworks applicable to life science organizations.
• Professional certifications (CISA, CISSP, CSSP) are highly desirable.
• Excellent verbal and written communication skills.
• Ability to work independently and collaboratively, as required, in a fast-paced start-up environment consisting of internal and external team members.
• Analytical thinker with excellent problem-solving skills.
• Excellent planning, organization and time management skills including the ability to support and prioritize multiple projects.

Location(s):

Stoke operates sites in Bedford, MA, and Cambridge, MA. This position is a hybrid position with an office setting based primarily in our Bedford, MA location with occasional attendance as needed in Cambridge, MA.

Travel:

This position will require approximately 5% travel.

Culture & Values:

At Stoke, we believe that innovation, the ability to successfully advance our ground-breaking science and having fun as a team are enhanced by being together in person, at least periodically. We allow for flexibility in work arrangements that balance individual's needs and preferences with the needs of our business and our desire to foster a culture of collaboration and innovation.

Our values guide our work to deliver meaningful medicines for people who need them. We are committed to being true to ourselves, to our colleagues, and to the people with severe diseases who are counting on us. We embrace diversity within a unique culture that is defined by our values. Our employee-led Diversity, Inclusion, and Belonging Committee (DIB) underscores the importance of DIB to who we are and what we do.

Benefits & Compensation:

At Stoke Therapeutics we are proud to offer comprehensive and competitive employee benefits, including medical, dental and vision insurance; life, long and short-term disability insurance; Paid Parental Leave; a 401K program with company match, unlimited vacation time, and an Employee Stock Purchase Program (ESPP). Compensation is market competitive for the industry and directly commensurate with experience. All positions are bonus and stock eligible.

Interested candidates: Please visit Stoke's website to learn more and apply directly to the position listed on our Career Center:

https://www.stoketherapeutics.com/careers/

For more information, visit https://www.stoketherapeutics.com/ or follow the company on Twitter at @StokeTx.

All applicants will receive consideration for employment without regard to race, color, age, religion, sex, sexual orientation, gender identity, national origin, physical or mental disability or protected veteran status.

Stoke participates in E-Verify.