Vice President, IT Resilience & Trust

The posting

Madrigal is a biopharmaceutical company focused on delivering novel therapeutics for metabolic dysfunction-associated steatohepatitis (MASH), a serious liver disease that can progress to cirrhosis, liver failure, need for liver transplantation and premature mortality. Every member of our Madrigal team is connected by our shared purpose: leading the fight against MASH.

Madrigal’s medication, Rezdiffra (resmetirom), is a once-daily, oral, liver-directed THR-β agonist designed to target key underlying causes of MASH. Rezdiffra is the first and only medication approved by both the FDA and European Commission for the treatment of MASH with moderate to advanced fibrosis (F2 to F3). An ongoing Phase 3 outcomes trial is evaluating Rezdiffra for the treatment of compensated MASH cirrhosis (F4c).

Our success is driven by our people. We are building a dynamic, inclusive, and high-performing culture that values scientific excellence, operational rigor, and collaboration. To support our continued growth, we are strengthening our workforce strategy to ensure we have the right talent, at the right time, in the right way.

The Vice President, IT Resilience & Trust is a strategic and operational technology executive responsible for ensuring Madrigal’s technology environment is reliable, resilient, secure, compliant, and able to scale with the business.

As Madrigal continues to grow, expand internationally, and adopt new technologies at increasing speed, the technology foundation supporting the company is becoming more complex, interconnected, and critical to business performance. This leader will bring together Infrastructure & Reliability, Cybersecurity, and Technology Compliance under an integrated Resilience & Trust organization and will establish the strategies, operating practices, capabilities, standards, and controls needed to support Madrigal’s continued growth.

Reporting to the Chief Information Officer, this is a senior IT leadership role with accountability spanning both strategy and execution. The Vice President will lead the functional leaders responsible for Infrastructure, Cybersecurity, and Technology Compliance while establishing an integrated operating model across these domains.

This leader will establish a disciplined management system across Resilience & Trust, using service, reliability, risk, security, compliance, and resilience data to identify trends, make investment decisions, manage performance, and drive continuous improvement.

Working across the IT Leadership Team, the Vice President will establish practical standards and guardrails that allow Madrigal to innovate and scale with confidence. This includes partnering closely with technology and business leaders to ensure cybersecurity, compliance, resilience, and technology risk requirements are embedded into architecture, delivery, operations, emerging technologies, and AI-enabled capabilities without creating unnecessary friction.

As Madrigal expands globally, this executive will establish a repeatable technology foundation and operating model that enables new markets to launch consistently, efficiently, effectively, and safely.

Key Responsibilities

Resilience & Trust Strategy

• Define and execute Madrigal’s integrated Resilience & Trust strategy and multi-year roadmap across infrastructure, cybersecurity, technology compliance, service management, and resilience.
• Translate business growth, international expansion, regulatory requirements, technology trends, and emerging risks into clear priorities, standards, roadmaps, and investment decisions.
• Establish target architectures, operating principles, and risk-based technology guardrails that enable speed and innovation while maintaining appropriate reliability, security, compliance, and resilience.
• Partner with AI, digital, data, and other technology leaders to establish practical control, security, monitoring, and assurance expectations, and develop a repeatable technology foundation for global expansion.
• Establish a data-driven operating cadence across Resilience & Trust, manage investment tradeoffs, and serve as a trusted advisor to the CIO and IT Leadership Team on material risks, dependencies, priorities, and decisions.

Infrastructure & Reliability

• Provide executive leadership for infrastructure, workplace technology, enterprise service management, and technology operations, ensuring services are reliable, scalable, secure, resilient, and aligned with business needs.
• Define and evolve the strategy for cloud, networks, workplace, identity and access, endpoints, collaboration, and other foundational technology services.
• Build an enterprise-grade service management model that gives employees a consistent way to obtain technology support and establishes common ITSM practices across infrastructure, applications, digital products, data platforms, and key providers.
• Mature the ITSM platform, service ownership model, CMDB/service mapping, and core disciplines including incident, problem, change, request, knowledge, configuration, and service-level management.
• Establish measurable service levels, customer experience measures, observability, and operational health metrics, using performance data and root-cause analysis to improve reliability, reduce technical debt, and drive continuous improvement.
• Own technology resilience and major incident management, including disaster recovery, RTO/RPO, dependency mapping, testing, cross-functional recovery coordination, and executive communication during significant technology disruptions.

Cybersecurity & Technology Risk

• Provide executive accountability and strategic direction for Madrigal’s cybersecurity program, leading the Head of Cybersecurity and maintaining a risk-based strategy aligned with business priorities, regulatory obligations, and risk appetite.
• Embed cybersecurity standards and controls into architecture, infrastructure, applications, vendors, acquisitions, international expansion, and major transformation initiatives.
• Establish cybersecurity and technology risk expectations for emerging technologies, including AI, in partnership with innovation and delivery leaders.
• Maintain effective oversight across identity and access, vulnerability management, monitoring, threat detection and response, endpoint and infrastructure security, sensitive information protection, and third-party technology risk.
• Ensure cyber risks and incidents are assessed, prioritized, communicated, and addressed based on business impact, with clear visibility into posture, material risks, remediation priorities, and emerging threats.

Technology Compliance & Governance

• Provide executive leadership for Madrigal’s technology compliance capability and establish a scalable, risk-based control environment that supports regulated operations while enabling speed and innovation.
• Define governance frameworks, technology controls, standards, and operating practices that support regulatory requirements, company policies, and risk-management expectations, with clear accountability for control ownership, execution, evidence, and remediation.
• Partner closely with Quality to maintain appropriate lifecycle compliance for regulated and GxP technology systems, including CSV/CSA, 21 CFR Part 11, data integrity, validation, audit readiness, and inspection support, while preserving Quality’s independent oversight role.
• Partner with Finance, Internal Audit, Privacy, Legal, and other stakeholders to ensure technology controls supporting SOX, privacy, cybersecurity, data protection, and other enterprise requirements are clearly owned and effectively operated.
• Establish risk-based governance and meaningful measures of control effectiveness, compliance posture, remediation progress, technology risk, and audit/inspection readiness.
• Ensure material compliance risks and control deficiencies have clear owners, remediation plans, escalation paths, and timely closure, and serve as a senior technology partner for audits, inspections, and regulatory readiness activities.

Leadership, Capability Building & Cross Functional Partnership

• Lead, develop, and integrate the Infrastructure, Cybersecurity, and Technology Compliance leaders and teams into a cohesive Resilience & Trust organization with clear accountability and strong strategic and operational discipline.
• Raise the maturity of the organization through clear expectations for strategy, roadmaps, service ownership, metrics, risk management, executive communication, and continuous improvement.
• Develop functional leaders, assess organizational capability as needs evolve, and make appropriate changes to talent, structure, sourcing, and operating models.
• Manage budgets, investments, vendors, managed service providers, and resources across the Resilience & Trust portfolio, resolving tradeoffs within the function and escalating enterprise-level decisions when needed.
• Partner across the IT Leadership Team and with International and other key stakeholders to embed reliability, cybersecurity, compliance, resilience, service management, and consistent technology standards into delivery and global growth.
• Provide clear executive visibility into service health, resilience, cybersecurity, compliance, significant incidents, risks, resource constraints, and investment needs while fostering a culture of ownership, accountability, service, and continuous improvement.

Qualifications

Education

• Bachelor’s degree in Computer Science, Information Systems, Engineering, or a related discipline required.
• Advanced degree such as an MBA, MS, or related graduate degree preferred.
• An equivalent combination of education and highly relevant experience may be considered.

Experience

• Prior experience serving as a Chief Information Security Officer (CISO) for a publicly traded company strongly preferred, with demonstrated experience operating at the executive level in an environment with significant cybersecurity, regulatory, governance, and Board-level expectations.
• Typically 20+ years of progressive technology leadership experience, including significant responsibility across infrastructure and operations, cybersecurity, technology risk, compliance, resilience, service management, or related domains.
• Demonstrated success leading multiple technology functions and senior leaders in a complex, growing organization, including building or materially transforming capabilities rather than only operating mature environments.
• Experience in a regulated environment; pharmaceutical, biotechnology, life sciences, healthcare, or another highly regulated industry strongly preferred.
• Significant experience establishing or maturing enterprise technology operations and service management, including service desk, ITSM, service ownership, incident/problem/change management, service measurement, and related operating disciplines.
• Demonstrated ability to define technology strategies, target-state roadmaps, architecture standards, governance mechanisms, and multi-year capability plans, and to scale them through growth, international expansion, or increasing regulatory complexity.
• Strong understanding of enterprise infrastructure, cloud, workplace technology, identity and access, cybersecurity, disaster recovery, resilience, service management, governance, and regulated technology controls.
• Experience operating technology control environments supporting GxP or other regulated activities, and working effectively with Quality, audit, risk, compliance, and other independent oversight functions.
• Demonstrated experience leading major technology incidents, developing high-performing leaders and teams, managing significant budgets and external partners, and improving reliability, resilience, customer experience, security, compliance, and operational performance.

Skills & Competencies

• Strong executive presence, business judgment, and credibility with senior business and technology leaders.
• Enterprise-oriented thinker who can connect business objectives, technology strategy, operational performance, risk, regulatory requirements, and investment decisions across multiple domains.
• Strong operational leader who establishes clear management systems, metrics, and accountability and uses data to drive decisions and continuous improvement.
• Customer- and service-oriented, with the ability to view technology operations through the employee and business-user experience.
• Effective leader of leaders who can set strategic direction, build capabilities in ambiguous environments, and go deep into individual domains when needed.
• Able to balance innovation, speed, reliability, cybersecurity, resilience, risk, and compliance through practical, risk-based standards and controls.
• Strong collaborator and communicator who can influence across a matrixed organization, lead decisively during significant incidents, and translate complex technology and regulatory issues into clear business implications, options, and recommendations.

Leader Profile

The successful candidate will be a strategic, enterprise-minded technology executive who views resilience, trust, and technology operations as business capabilities. They will be a builder and integrator who can bring Infrastructure & Reliability, Cybersecurity, and Technology Compliance together into a cohesive operating model while developing strong leaders across each function.

This leader will be equally comfortable setting multi-year strategy, reviewing operational performance, improving the employee support experience, making investment tradeoffs, and leading decisively through significant technology disruptions. They will combine strategic vision with operational discipline and use data, clear accountability, and practical

risk management to drive performance.

Above all, this individual will create a technology foundation that enables innovation while remaining reliable, secure, compliant, resilient, and ready to scale with Madrigal’s growth.

*Hybrid work schedule - 3 days a week working in office*

Madrigal’s Total Rewards strategy is based on a biotech industry peer group comparator and is inclusive of base pay, bonus and equity. Our equity offers meaningful opportunity allowing our employees to share in the success they help create. By aligning individual and company performance, we empower employees to think like owners, giving them a stake in the organization.

All employees receive equity, which we believe reinforces our ownership culture. Base salary is determined by several factors including the candidate’s qualifications, skills, education, experience, business needs and market demands. As of the date of this posting, a good faith estimate of the current pay scale for this position, applicable to all candidates, is $294,722 - $360, 215 per year. We comply with all applicable minimum wage laws.

All full-time employees receive equity, which reinforces our ownership culture and offers meaningful opportunity for our employees to share in the success they help create. By aligning individual and company performance, we empower employees to think like owners, giving them a stake in the organization.

Full-time employees are also eligible for comprehensive benefits, including flexible paid time off, medical, dental, vision and life/disability insurance, and 401(k) offerings (i.e., traditional, Roth, and employer match) in accordance with applicable plans. We also offer additional voluntary benefits like supplemental life insurance, legal services, and other offerings. In addition, we offer mental health benefits through our Employee Assistance Program for employees and their family. The company also provides other benefits in accordance with applicable federal, state, and local laws.

We are committed to providing reasonable accommodations for individuals with disabilities throughout the hiring process. If you need assistance, please contact [email protected].

Madrigal is an Equal Opportunity Employer. All employment is decided on the basis of qualifications, merit, and business need. Applicants will receive consideration for employment without regard to race, ethnicity, color, religion, sex gender identity, sexual orientation, national origin, age, disability, protected veteran or disabled status, or other characteristic protected by applicable federal, state, or local law.

Unsolicited resumes from agencies should not be forwarded to Madrigal. Madrigal will not be responsible for any fees arising from the use of resumes through this source. Madrigal will only pay a fee to agencies if a formal agreement between Madrigal and the agency has been established.

Applications are being accepted on an ongoing basis and can be submitted through our Madrigal Careers site.

Please be aware that we have received reports of individuals misrepresenting themselves as Madrigal Pharmaceuticals’ Hiring Managers, seeking to engage with job candidates through fraudulent online advertisements or job posting sites. These unauthorized individuals are using Madrigal’s name and logo in an attempt to solicit up-front fees and obtain personal information from interested job candidates. Please know that Madrigal does not conduct interviews via text or in chat rooms; conduct interviews via Skype, RingCentral or solely via telephone; charge candidates an advance fee of any kind (e.g., fees for purchasing equipment); nor does it offer positions of employment without undergoing a thorough recruiting process.

Please also note that any correspondence with regard to employment would come from an authorized madrigalpharma.com email address or from an email address from one of our trusted search firm partners. We are aware that incorrect/fraudulent email addresses, with Madrigal misspelled, have been utilized in these most recent fraud attempts. If you receive unsolicited employment offers from people claiming to work for or on behalf of Madrigal, we recommend that you: do not respond to their questions; do not open any attachments; and do not click on any hyperlinks. Any questions regarding the legitimacy of job-related contacts can be directed to [email protected].