Madrigal is a biopharmaceutical company focused on delivering novel therapeutics for metabolic dysfunction-associated steatohepatitis (MASH), a serious liver disease that can progress to cirrhosis, liver failure, need for liver transplantation and premature mortality. Every member of our Madrigal team is connected by our shared purpose: leading the fight against MASH.
Madrigal’s medication, Rezdiffra (resmetirom), is a once-daily, oral, liver-directed THR-β agonist designed to target key underlying causes of MASH. Rezdiffra is the first and only medication approved by both the FDA and European Commission for the treatment of MASH with moderate to advanced fibrosis (F2 to F3). An ongoing Phase 3 outcomes trial is evaluating Rezdiffra for the treatment of compensated MASH cirrhosis (F4c).
Our success is driven by our people. We are building a dynamic, inclusive, and high-performing culture that values scientific excellence, operational rigor, and collaboration. To support our continued growth, we are strengthening our workforce strategy to ensure we have the right talent, at the right time, in the right way.
The Vice President, IT Resilience & Trust is a strategic and operational technology executive responsible for ensuring Madrigal’s technology environment is reliable, resilient, secure, compliant, and able to scale with the business.
As Madrigal continues to grow, expand internationally, and adopt new technologies at increasing speed, the technology foundation supporting the company is becoming more complex, interconnected, and critical to business performance. This leader will bring together Infrastructure & Reliability, Cybersecurity, and Technology Compliance under an integrated Resilience & Trust organization and will establish the strategies, operating practices, capabilities, standards, and controls needed to support Madrigal’s continued growth.
Reporting to the Chief Information Officer, this is a senior IT leadership role with accountability spanning both strategy and execution. The Vice President will lead the functional leaders responsible for Infrastructure, Cybersecurity, and Technology Compliance while establishing an integrated operating model across these domains.
This leader will establish a disciplined management system across Resilience & Trust, using service, reliability, risk, security, compliance, and resilience data to identify trends, make investment decisions, manage performance, and drive continuous improvement.
Working across the IT Leadership Team, the Vice President will establish practical standards and guardrails that allow Madrigal to innovate and scale with confidence. This includes partnering closely with technology and business leaders to ensure cybersecurity, compliance, resilience, and technology risk requirements are embedded into architecture, delivery, operations, emerging technologies, and AI-enabled capabilities without creating unnecessary friction.
As Madrigal expands globally, this executive will establish a repeatable technology foundation and operating model that enables new markets to launch consistently, efficiently, effectively, and safely.
Key Responsibilities
Resilience & Trust Strategy
•Define and execute Madrigal’s integrated Resilience & Trust strategy and multi-year roadmap across infrastructure, cybersecurity, technology compliance, service management, and resilience.
•Translate business growth, international expansion, regulatory requirements, technology trends, and emerging risks into clear priorities, standards, roadmaps, and investment decisions.
•Establish target architectures, operating principles, and risk-based technology guardrails that enable speed and innovation while maintaining appropriate reliability, security, compliance, and resilience.
•Partner with AI, digital, data, and other technology leaders to establish practical control, security, monitoring, and assurance expectations, and develop a repeatable technology foundation for global expansion.
•Establish a data-driven operating cadence across Resilience & Trust, manage investment tradeoffs, and serve as a trusted advisor to the CIO and IT Leadership Team on material risks, dependencies, priorities, and decisions.
Infrastructure & Reliability
•Provide executive leadership for infrastructure, workplace technology, enterprise service management, and technology operations, ensuring services are reliable, scalable, secure, resilient, and aligned with business needs.
•Define and evolve the strategy for cloud, networks, workplace, identity and access, endpoints, collaboration, and other foundational technology services.
•Build an enterprise-grade service management model that gives employees a consistent way to obtain technology support and establishes common ITSM practices across infrastructure, applications, digital products, data platforms, and key providers.
•Mature the ITSM platform, service ownership model, CMDB/service mapping, and core disciplines including incident, problem, change, request, knowledge, configuration, and service-level management.
•Establish measurable service levels, customer experience measures, observability, and operational health metrics, using performance data and root-cause analysis to improve reliability, reduce technical debt, and drive continuous improvement.
•Own technology resilience and major incident management, including disaster recovery, RTO/RPO, dependency mapping, testing, cross-functional recovery coordination, and executive communication during significant technology disruptions.
Cybersecurity & Technology Risk
•Provide executive accountability and strategic direction for Madrigal’s cybersecurity program, leading the Head of Cybersecurity and maintaining a risk-based strategy aligned with business priorities, regulatory obligations, and risk appetite.
•Embed cybersecurity standards and controls into architecture, infrastructure, applications, vendors, acquisitions, international expansion, and major transformation initiatives.
•Establish cybersecurity and technology risk expectations for emerging technologies, including AI, in partnership with innovation and delivery leaders.
•Maintain effective oversight across identity and access, vulnerability management, monitoring, threat detection and response, endpoint and infrastructure security, sensitive information protection, and third-party technology risk.
•Ensure cyber risks and incidents are assessed, prioritized, communicated, and addressed based on business impact, with clear visibility into posture, material risks, remediation priorities, and emerging threats.
Technology Compliance & Governance
•Provide executive leadership for Madrigal’s technology compliance capability and establish a scalable, risk-based control environment that supports regulated operations while enabling speed and innovation.
•Define governance frameworks, technology controls, standards, and operating practices that support regulatory requirements, company policies, and risk-management expectations, with clear accountability for control ownership, execution, evidence, and remediation.
•Partner closely with Quality to maintain appropriate lifecycle compliance for regulated and GxP technology systems, including CSV/CSA, 21 CFR Part 11, data integrity, validation, audit readiness, and inspection support, while preserving Quality’s independent oversight role.
•Partner with Finance, Internal Audit, Privacy, Legal, and other stakeholders to ensure technology controls supporting SOX, privacy, cybersecurity, data protection, and other enterprise requirements are clearly owned and effectively operated.
•Establish risk-based governance and meaningful measures of control effectiveness, compliance posture, remediation progress, technology risk, and audit/inspection readiness.
•Ensure material compliance risks and control deficiencies have clear owners, remediation plans, escalation paths, and timely closure, and serve as a senior technology partner for audits, inspections, and regulatory readiness activities.
Leadership, Capability Building & Cross Functional Partnership
•Lead, develop, and integrate the Infrastructure, Cybersecurity, and Technology Compliance leaders and teams into a cohesive Resilience & Trust organization with clear accountability and strong strategic and operational discipline.
•Raise the maturity of the organization through clear expectations for strategy, roadmaps, service ownership, metrics, risk management, executive communication, and continuous improvement.
•Develop functional leaders, assess organizational capability as needs evolve, and make appropriate changes to talent, structure, sourcing, and operating models.
•Manage budgets, investments, vendors, managed service providers, and resources across the Resilience & Trust portfolio, resolving tradeoffs within the function and escalating enterprise-level decisions when needed.
•Partner across the IT Leadership Team and with International and other key stakeholders to embed reliability, cybersecurity, compliance, resilience, service management, and consistent technology standards into delivery and global growth.
•Provide clear executive visibility into service health, resilience, cybersecurity, compliance, significant incidents, risks, resource constraints, and investment needs while fostering a culture of ownership, accountability, service, and continuous improvement.
Qualifications
Education
•Bachelor’s degree in Computer Science, Information Systems, Engineering, or a related discipline required.
•Advanced degree such as an MBA, MS, or related graduate degree preferred.
•An equivalent combination of education and highly relevant experience may be considered.
Experience
•Prior experience serving as a Chief Information Security Officer (CISO) for a publicly traded company strongly preferred, with demonstrated experience operating at the executive level in an environment with significant cybersecurity, regulatory, governance, and Board-level expectations.
•Typically 20 years of progressive technology leadership experience, including significant responsibility across infrastructure and operations, cybersecurity, technology risk, compliance, resilience, service management, or related domains.
•Demonstrated success leading multiple technology functions and senior leaders in a complex, growing organization, including building or materially transforming capabilities rather than only operating mature environments.
•Experience in a regulated environment; pharmaceutical, biotechnology, life sciences, healthcare, or another highly regulated industry strongly preferred.
•Significant experience establishing or maturing enterprise technology operations and service management, including service desk, ITSM, service ownership, incident/problem/change management, service measurement, and related operating disciplines.
•Demonstrated ability to define technology strategies, target-state roadmaps, architecture standards, governance mechanisms, and multi-year capability plans, and to scale them through growth, international expansion, or increasing regulatory complexity.
•Strong understanding of enterprise infrastructure, cloud, workplace technology, identity and access, cybersecurity, disaster recovery, resilience, service management, governance, and regulated technology controls.
•Experience operating technology control environments supporting GxP or other regulated activities, and working effectively with Quality, audit, risk, compliance, and other independent oversight functions.
•Demonstrated experience leading major technology incidents, developing high-performing leaders and teams, managing significant budgets and external partners, and improving reliability, resilience, customer experience, security, compliance, and operational performance.
Skills & Competencies
•Strong executive presence, business judgment, a