Full-Time
Chief Information Security Officer
Cybersecurity
Scholar Rock
201-500 employees
Biopharmaceutical firm targeting protein growth factors
Compensation Overview
$245k - $325k/yr
Cambridge, MA, USA
In Person
Bachelor's
 IT & Security (1) |
|---|
Get referred to Scholar Rock
See people who can refer or advise you
- A bachelor's degree in Information Security, Computer Science, Engineering, Information Technology, or a related discipline is required.
- At least 12 years of progressive cybersecurity experience with increasing leadership responsibilities is required.
- Demonstrated leadership experience spanning cybersecurity architecture, engineering, and operational security functions is required.
- Experience building, implementing, or maturing enterprise cybersecurity programs and capabilities is required.
- Experience leading cybersecurity initiatives within regulated environments is required.
- Strong knowledge of the NIST Cybersecurity Framework, cybersecurity governance, risk management, and security control implementation is required.
- Experience supporting audits, compliance programs, risk assessments, and remediation activities is required.
- Experience with data protection, access governance, third-party risk, and security controls for cloud, software as a service, endpoint, and enterprise application environments is required.
- Experience managing cybersecurity vendors, managed service providers, and outsourced security services is required.
- Proven ability to communicate effectively with executive leadership and influence organizational decision-making is required.
- Strong presentation, communication, and stakeholder management skills are required.
- CISSP certification is required.
- Define and execute the enterprise cybersecurity strategy, roadmap, priorities, and operating model.
- Establish cybersecurity governance, policies, standards, and control frameworks aligned with business objectives and organizational growth.
- Prioritize cybersecurity maturity initiatives based on business risk, regulatory expectations, commercial growth, and organizational scale.
- Drive continuous improvement of cybersecurity capabilities and maturity across the organization.
- Serve as the primary cybersecurity advisor to the CIO, Board of Directors, and business leadership.
- Translate cybersecurity risks and opportunities into clear, actionable business recommendations.
- Own the cybersecurity target-state architecture and security technology roadmap.
- Lead cybersecurity architecture and engineering across cloud, infrastructure, identity, endpoint, network, application, software as a service, and data environments.
- Embed secure-by-design and risk-based security principles across enterprise initiatives and technology platforms.
- Partner with technology teams to integrate security requirements into solution design, implementation, and operational support models.
- Evaluate, select, and optimize cybersecurity technologies and services that support business and regulatory requirements.
- Own security operations capabilities, including vulnerability management, incident response, security monitoring, identity security, and cyber resilience.
- Establish and mature detection, response, recovery, and continuous improvement capabilities.
- Lead cybersecurity incident response activities, executive communications, and post-incident reviews.
- Partner with technology teams and service providers to strengthen operational security capabilities and reduce enterprise risk.
- Support business continuity, disaster recovery, and cyber resilience planning in partnership with IT and business stakeholders.
- Lead the enterprise cybersecurity governance, risk, and compliance program.
- Establish and maintain cybersecurity risk management processes, risk assessments, remediation plans, and risk reporting.
- Support SOX IT General Controls, user access governance, change management controls, and third-party risk management activities.
- Maintain alignment with the NIST Cybersecurity Framework and applicable regulatory requirements.
- Develop cybersecurity metrics, KPIs, KRIs, and executive reporting.
- Prepare cybersecurity risk, maturity, roadmap, and investment updates for senior leadership and audit committee discussions.
- Lead cybersecurity capabilities to protect sensitive company data, intellectual property, clinical data, regulated information, and business-critical records.
- Partner with Legal, Privacy, Quality, Data and Analytics, and business stakeholders to support data governance, data classification, access controls, and security-related privacy requirements.
- Strengthen data protection capabilities across cloud, software as a service, endpoint, collaboration, and enterprise application environments.
- Support implementation of privacy-by-design and least privilege principles in alignment with regulatory and business requirements.
- Partner with Legal and Privacy on security considerations related to data protection, privacy obligations, vendor risk, and evolving regulatory expectations.
- Serve as the cybersecurity lead for internal audits, external audits, inspections, and cybersecurity assessments.
- Partner with Privacy, Legal, Quality, and IT stakeholders to ensure cybersecurity controls support compliance obligations.
- Ensure cybersecurity controls support GxP-regulated systems, Computer System Validation, and data integrity.
- Drive timely remediation of audit findings, observations, and control deficiencies.
- Define and lead the cybersecurity operating model using internal teams, managed service providers, consultants, and strategic partners.
- Own strategic relationships with cybersecurity vendors, managed service providers, consultants, and external partners, including governance, performance management, and accountability.
- Establish service expectations, SLAs, KPIs, KRIs, operational metrics, and accountability mechanisms for third-party providers.
- Conduct operational and executive-level performance reviews to ensure cybersecurity services meet business, compliance, regulatory, and operational objectives.
- Partner with Procurement, Legal, Finance, and IT leadership on vendor selection, contract negotiations, renewals, investment decisions, and build-versus-buy-versus-outsource decisions.
- Develop and deliver cybersecurity strategy updates, risk assessments, roadmap reviews, audit results, and investment recommendations to senior leadership.
- Communicate cybersecurity risks and opportunities in clear business, operational, regulatory, and financial terms.
- Build trusted relationships across business and technology functions.
- Influence enterprise decision-making through practical, risk-based recommendations and effective stakeholder management.
- Serve as a pragmatic advisor who enables business growth while maintaining appropriate risk discipline.
- Lead, coach, mentor, and develop cybersecurity personnel and security-focused resources.
- Provide leadership across employees, contractors, consultants, and managed service providers.
- Foster a culture of accountability, continuous improvement, collaboration, and operational excellence.
- Help shape the future cybersecurity organization as the company continues to scale.
- Build a security culture that is practical, business-aligned, and appropriate for a growing commercial biotechnology company.
- Experience in biotechnology, pharmaceutical, life sciences, healthcare, or medical device industries.
- Experience supporting GxP-regulated systems, Computer System Validation, Quality Management Systems, and inspection readiness activities.
- Experience supporting SOX compliance and IT General Controls.
- Familiarity with cloud security, identity and access management, vulnerability management, data protection, cybersecurity operations, and cyber resilience programs.
- Experience partnering with Legal and Privacy teams on data protection, privacy-by-design, data classification, access control, and vendor risk considerations.
- Experience supporting commercial-stage companies through growth, scale, geographic expansion, or increasing regulatory complexity.
- CISM, CRISC, CCSP, GIAC, CISA, or ISO 27001 certifications.
Scholar Rock develops biopharmaceutical therapies by targeting protein growth factors to treat diverse diseases. Its work hinges on a proprietary drug discovery platform that identifies ways to modulate these growth factors, enabling creation of novel therapeutic solutions. The company advances its programs through research and development, and collaborates with other biopharmaceutical companies and research institutions, earning revenue via licensing agreements, milestone payments, and eventual product sales. Scholar Rock differentiates itself by focusing on protein growth factors and pursuing targets and indications that have been historically overlooked, with a strong emphasis on partnerships and patient-centric approaches. The overall goal is to deliver safe and effective therapies that improve patient outcomes by precisely modulating growth factor pathways through collaborative science.
Company Size
201-500
Company Stage
IPO
Headquarters
Cambridge, Massachusetts
Founded
2012
Get referred to Scholar Rock
See people who can refer or advise you
Simplify's Take
What believers are saying
- Scholar Rock secured a $550 million Blue Owl facility on March 24, 2026.
- The second fill-finish site should support early Q3 2026 commercial supply.
- Reuters on July 20, 2026 said CHMP opinion can still land later in 2026.
What critics are saying
- Catalent Indiana's April 2026 inspection still blocks EMA opinion timing.
- A September 30, 2026 FDA PDUFA leaves approval risk concentrated in one catalyst.
- Aptigromab is the only near-term value driver; a CRL would crush the company.
What makes Scholar Rock unique
- Apitegromab targets myostatin biology with rare-disease specificity and motor-function data.
- FDA accepted the March 31, 2026 resubmission, signaling a credible regulatory path.
- Scholar Rock holds both U.S. and EU PRIME designations for apitegromab.
Help us improve and share your feedback! Did you find this helpful?
Benefits
Flexible Work Hours
Growth & Insights and Company News
6 month growth
↓ -4%1 year growth
↑ 7%2 year growth
↑ 4%European review of SMA therapy awaits upcoming results from US facility check. Scholar Rock prepares a secondary manufacturing site for apitegromab * EU approval for apitegromab, an experimental SMA therapy, awaits US FDA inspection results of a manufacturing facility. * Apitegromab is an add-on therapy for SMA, shown to improve motor function. * Scholar Rock is preparing a second manufacturing facility to ensure supply and address regulatory concerns. An official decision on whether to approve apitegromab for spinal muscular atrophy (SMA) in the European Union may hinge on upcoming inspection results from U.S. regulators, biopharmaceutical company Scholar Rock has announced. The European Medicines Agency (EMA) is currently reviewing the experimental muscle-strengthening therapy. However, European authorities are awaiting an official inspection update from the U.S. Food and Drug Administration (FDA) about one of the drug's key manufacturing facilities before rendering a final opinion. "We are very pleased with the EMA's review of the apitegromab [application] and with the level of engagement we have from the Agency," David L. Hallal, board chair and CEO of Scholar Rock, said in a company press release. SMA is a neuromuscular disorder that causes progressive muscle weakness. Apitegromab is an antibody-based therapy designed to boost muscle strength by blocking the activity of myostatin, a protein that normally prevents excess muscle growth. Scholar Rock is developing apitegromab as an add-on to disease-modifying treatments that slow progression by targeting SMA's root cause, with the aim of helping patients achieve better motor function. Recommended Reading Phase 3 trial and regulatory path. A Phase 3 clinical trial called SAPPHIRE (NCT05156320) tested apitegromab against a placebo in children and young adults with SMA type 2 or type 3 who were taking the disease-modifying therapies Spinraza (nusinersen) or Evrysdi (risdiplam). The study met its main goal, demonstrating that motor function scores improved significantly in patients receiving apitegromab. Based on those positive Phase 3 results, Scholar Rock submitted an application seeking U.S. approval for apitegromab in early 2025. However, later that year, the FDA declined to approve the initial submission. The agency raised no concerns about apitegromab's safety or efficacy data, but it cited compliance issues at a third-party fill-finish facility, a specialized manufacturing center responsible for final drug packaging and product sterility. Since receiving the FDA's decision, Scholar Rock has been working with the facility, known as Catalent Indiana (part of Novo Nordisk), to address regulators' concerns. To ensure a stable medication supply, Scholar Rock also enlisted a second fill-finish facility. Scholar Rock has since resubmitted its U.S. application, and an FDA decision is expected in late September. Meanwhile, Scholar Rock is also seeking approval of apitegromab in the EU. Notably, while the company's resubmitted U.S. application details both fill-finish facilities, the European application currently lists only the Catalent Indiana site. When experimental therapies are reviewed in the EU, a key step is evaluation by the Committee for Medicinal Products for Human Use (CHMP), an arm of the EMA. The committee makes recommendations for or against approval, which are almost always followed by the European Commission, the body with final decision-making authority for EU drug approvals. Scholar Rock prepares dual-facility backup. The FDA completed an inspection of the Catalent Indiana facility in April, and according to Scholar Rock, the CHMP is withholding its recommendation on apitegromab until the FDA's inspection results are available. If the FDA gives the facility the green light, an opinion from the CHMP is expected before the end of 2026. If not, Scholar Rock said it will work with European regulators to update its European filing to incorporate the second fill-finish facility, which the company said is already in good standing with both the FDA and EMA. "We expect clarity from the FDA on the inspection classification of Catalent Indiana in the near term, and we remain confident in our ability to advance our [application for apitegromab] through the EMA review process either with Catalent Indiana or by taking the necessary steps to include our second fill-finish facility," Hallal said. Which best describes you? Marisa holds a Master of Science in cellular and molecular pathology from the University of Pittsburgh, where she studied novel genetic drivers of ovarian cancer. Her areas of expertise include cancer biology, immunology, and genetics, and she has worked as a science writing and communications intern for the Genetics Society of America.
Scholar Rock to showcase neuromuscular research portfolio at 2026 Annual Cure SMA Research and Clinical Care Meeting and 2026 international research congress on FSHD. June 22, 2026 BCBN news, syndication comments off on scholar Rock to showcase neuromuscular research portfolio at 2026 Annual Cure SMA Research and Clinical Care Meeting and 2026 international research congress on FSHD. CAMBRIDGE, Mass.-(BUSINESS WIRE)-Scholar Rock (NASDAQ: SRRK), a global biopharmaceutical company dedicated to improving the lives of children and adults with spinal muscular atrophy (SMA) and additional rare, severe, and debilitating neuromuscular diseases by applying its world-leading platform in myostatin biology, announced today that it will present new clinical data and research updates at Cure SMA's Annual SMA Research & Clinical Care Meeting being held June 24-26, 2026, in Orlando, Click here to view original post
Scholar Rock to present at the Goldman Sachs 47th Annual Global Healthcare Conference. CAMBRIDGE, Mass.-(BUSINESS WIRE)-Scholar Rock (NASDAQ: SRRK), a global biopharmaceutical company dedicated to improving the lives of children and adults with spinal muscular atrophy (SMA) and additional rare, severe, and debilitating neuromuscular diseases by applying its leading platform in myostatin biology to advance musculoskeletal health, today announced that management will present at the Goldman Sachs 47th Annual Global Healthcare Conference in Miami, FL on Tuesday, June 9, 2026 at 10:00 a.m. ET. A live webcast of the event will be available under the "Events and Presentations" page within the Investors section of the Scholar Rock website at http://investors.scholarrock.com. A replay of the webcast will be available for approximately 90 days. About Scholar Rock Scholar Rock is a late-stage biopharmaceutical company focused on developing and commercializing apitegromab for children and adults with spinal muscular atrophy (SMA) and other rare, severe, and debilitating neuromuscular diseases. As a global leader in myostatin biology, a field focused on proteins that regulate muscle mass, the biopharmaceutical company is named for the visual resemblance of a scholar rock to protein structures. Its commitment to unlock fundamentally different treatment approaches is powered by broad application of a proprietary platform, which has developed novel monoclonal antibodies to modulate protein growth factors with extraordinary selectivity. Scholar Rock works every day to create new possibilities for patients through its highly innovative anti-myostatin program, including opportunities in additional rare neuromuscular diseases. Learn more at ScholarRock.com and follow @ScholarRock on X and on LinkedIn. Scholar Rock(R) is a registered trademark of Scholar Rock, Inc. Availability of Other Information About Scholar Rock Investors and others should note that Business Wire, Inc. communicate with its investors and the public using its company website www.scholarrock.com, including, but not limited to, company disclosures, investor presentations and FAQs, Securities and Exchange Commission filings, press releases, public conference call transcripts and webcast transcripts, as well as on X (formerly known as Twitter) and LinkedIn. The information that Business Wire, Inc. post on its website or on X (formerly known as Twitter) or LinkedIn could be deemed to be material information. As a result, Business Wire, Inc. encourage investors, the media and others interested to review the information that Business Wire, Inc. post there on a regular basis. The contents of its website or social media shall not be deemed incorporated by reference in any filing under the Securities Act of 1933, as amended. Contacts. Investors Laura Ekas, Ph.D. [email protected] 917-439-0374 Media Molly MacLeod, Ph.D. [email protected] 802-579-5995 More News From Scholar Rock CAMBRIDGE, Mass.-( BUSINESS WIRE )-Scholar Rock (NASDAQ: SRRK), a global biopharmaceutical company dedicated to improving the lives of children and adults with spinal muscular atrophy (SMA) and additional rare, severe, and debilitating neuromuscular diseases by applying its leading platform in myostatin biology to advance musculoskeletal health, today announced that management will present at the 2026 Jefferies Global Healthcare Conference in New York, NY on Wednesday, June 3, 2026 at 11:40 a.m... CAMBRIDGE, Mass.-( BUSINESS WIRE )-Scholar Rock (NASDAQ: SRRK; the "Company") today announced that the company granted inducement equity awards covering an aggregate of 38,481 shares of its common stock to six newly hired employees, consisting of inducement stock options to purchase an aggregate of 12,061 shares of common stock and inducement restricted stock units, covering an aggregate of 26,420 shares of its common stock. The awards are subject to all terms and conditions and other provision... CAMBRIDGE, Mass.-( BUSINESS WIRE )-Scholar Rock (NASDAQ: SRRK), a global biopharmaceutical company dedicated to improving the lives of children and adults with spinal muscular atrophy (SMA) and additional rare, severe, and debilitating neuromuscular diseases by applying its leading platform in myostatin biology to advance musculoskeletal health, today reported financial results for the first quarter ended March 31, 2026, and provided an update on recent company developments. "With the FDA's acc... Scholar Rock. NASDAQ:SRRK Release Versions Investors Laura Ekas, Ph.D. [email protected] 917-439-0374 Media Molly MacLeod, Ph.D. [email protected] 802-579-5995
Scholar Rock, a biopharmaceutical company developing treatments for spinal muscular atrophy and neuromuscular diseases, reported a net loss of $105.5 million for the first quarter of 2026, compared to $74.7 million in the same period last year. The FDA has accepted the company's biologics licence application for apitegromab, its lead muscle-targeted therapeutic candidate, with a 30 September 2026 decision date. The FDA completed reinspection of the Catalent Indiana fill-finish facility, with classification expected within 90 days. A second US fill-finish facility is expected to provide commercial supply in early Q3 2026. Scholar Rock had cash, cash equivalents and marketable securities of $479.9 million as of 31 March 2026. The company plans to launch apitegromab in Europe in H2 2026, beginning with Germany.
Scholar Rock to present at the BofA Securities 2026 Health Care Conference. CAMBRIDGE, Mass.-(BUSINESS WIRE)-Scholar Rock (NASDAQ: SRRK), a global biopharmaceutical company dedicated to improving the lives of children and adults with spinal muscular atrophy (SMA) and additional rare, severe, and debilitating neuromuscular diseases by applying its leading platform in myostatin biology to advance musculoskeletal health, today announced that management will present at the BofA Securities 2026 Health Care Conference in Las Vegas, NV, on May 12, 2026 at 8:00 a.m. PT / 11:00 a.m. ET. A live webcast of the event will be available under the "Events and Presentations" page within the Investors section of the Scholar Rock website at http://investors.scholarrock.com. A replay of the webcast will be available for approximately 90 days. About Scholar Rock Scholar Rock is a late-stage biopharmaceutical company focused on developing and commercializing apitegromab for children and adults with spinal muscular atrophy (SMA) and other rare, severe, and debilitating neuromuscular diseases. As a global leader in myostatin biology, a field focused on proteins that regulate muscle mass, the biopharmaceutical company is named for the visual resemblance of a scholar rock to protein structures. Its commitment to unlock fundamentally different treatment approaches is powered by broad application of a proprietary platform, which has developed novel monoclonal antibodies to modulate protein growth factors with extraordinary selectivity. Scholar Rock works every day to create new possibilities for patients through its highly innovative anti-myostatin program, including opportunities in additional rare neuromuscular diseases. Learn more at ScholarRock.com and follow @ScholarRock on X and on LinkedIn. Scholar Rock(R) is a registered trademark of Scholar Rock, Inc. Availability of Other Information About Scholar Rock Investors and others should note that HealthTech HotSpot LLC communicate with its investors and the public using its company website www.scholarrock.com, including, but not limited to, company disclosures, investor presentations and FAQs, Securities and Exchange Commission filings, press releases, public conference call transcripts and webcast transcripts, as well as on X (formerly known as Twitter) and LinkedIn. The information that HealthTech HotSpot LLC post on its website or on X (formerly known as Twitter) or LinkedIn could be deemed to be material information. As a result, HealthTech HotSpot LLC encourage investors, the media and others interested to review the information that HealthTech HotSpot LLC post there on a regular basis. The contents of its website or social media shall not be deemed incorporated by reference in any filing under the Securities Act of 1933, as amended. Scholar Rock Contacts April 29th, 2026 April 28th, 2026