Sr. Director, Security and Compliance

 ROLE SUMMARY

Our Global Cybersecurity Governance, Risk, and Compliance team provides comprehensive blueprints for cybersecurity excellence by embedding governance, risk management, and compliance into every layer. The team is responsible for ensuring risk-based decision-making is used and that security, privacy, and regulatory compliance is integrated seamlessly with Pfizer’s organization.

We are seeking an experienced Senior Director, Security & Compliance to lead the Security and Compliance Business Partners function within the Cybersecurity GRC organization. This role partners closely with R&D, PGS Manufacturing, Commercial, Digital, Enabling Services and corporate functions to ensure cybersecurity, data protection, and regulatory compliance requirements are understood, implemented, and sustained across the enterprise.

The role serves as a trusted advisor to senior business leaders, helping them manage cybersecurity and compliance risks in alignment with company policies, regulatory obligations, and industry expectations. This position plays a key role in developing and implementing a modern and technology-led approach to supporting a highly regulated pharmaceutical environment, including oversight of GxP systems, data integrity, patient safety, and global regulatory compliance.

ROLE RESPONSIBILITIES

Business Partnership & Advisory

• Establish the vision and operational cadence for a team of  Security and Compliance Partners who are assigned global business units, regions and functional areas

• Implement a technology driven solution to support

• Build strong relationships with senior leaders to integrate security and compliance considerations into business operations and strategic initiatives.

• Lead the development of practical, risk-based guidance that enables the business to meet regulatory and security requirements while supporting innovation.

• Partner with key leaders throughout the organization to execute on strategic goals and priorities for the Cyber GRC function.
   

Cybersecurity Compliance Oversight

• Develop and execute a vision to modernize and scale cyber and digital compliance.

• Ensure alignment with pharmaceutical regulatory requirements, including GxP, data integrity, privacy, and global regulatory expectations.

• Partner with Quality, Legal, Privacy, and Enterprise Risk Management teams to ensure consistent application of governance and controls.

• Support the identification, assessment, and management of cybersecurity, IT and compliance risks affecting business processes, systems, and data.
   

Regulatory and Audit Support

• Support internal and external audits, regulatory inspections, and compliance assessments by coordinating business engagement and remediation activities.

• Help business teams prepare for regulatory inquiries related to cybersecurity, data protection, and system controls.

• Track and report internal and external findings, remediation progress and risk acceptance decisions.

• Implement technology-led solutions to streamline audit and inspection processes.
   

Leadership, Communication, and Reporting

• Promote consistent processes, documentation, and reporting while allowing flexibility for local regulatory requirements.

• Set clear role expectations, performance objectives, and development plans for team members.

• Foster a culture of collaboration, accountability, and continuous improvement.

• Provide regular updates to senior leadership on cybersecurity and compliance risks, trends, and key initiatives.

• Define and monitor key metrics to demonstrate security and compliance posture to leadership.

• Develop executive and committee-level reporting as needed.

BASIC QUALIFICATIONS

• Bachelor’s degree required

• 12+ years of experience in Cybersecurity, IT, GRC, compliance, quality, or risk management roles within regulated industries, preferably in pharmaceutical industry

• Experience partnering directly with business leaders in a complex, global organization

• Proven abili