Sr. Manager, Business Information Security Office

Use Your Power for Purpose

Technology impacts everything we do. Pfizer’s digital and ‘data first’ strategy focuses on implementing impactful and innovative technology solutions across all functions from research to manufacturing. Whether you are digitizing drug discovery and development, identifying solutions, or making our work easier and faster, you will be making a difference to countless lives.

ROLE SUMMARY

Our Global Cybersecurity Governance, Risk, and Compliance (GRC) team provides comprehensive blueprints for cybersecurity excellence by embedding governance, risk management, and compliance into every layer. The team is responsible for ensuring risk-based decision-making is used, and that security, privacy, and regulatory compliance is integrated seamlessly with Pfizer’s organization.

We are seeking an experienced Senior Manager, Business Information Security Office (BISO) to serve as a trusted cybersecurity senior advisor and strategic liaison between the Cybersecurity organization and business stakeholders.

This role will lead the integration of cybersecurity requirements into major business initiatives, technology programs, and risk decisions, while also providing mentorship and guidance to BISO Managers and contributing to the overall strategy and maturity of the BISO enablement function.

ROLE RESPONSIBILITIES

• Serve as the senior cybersecurity point of contact and trusted advisor for assigned business functions, providing strategic guidance on cyber risk, policy requirements, and control expectations at an executive level.
• Partner with senior business, digital, product, quality, privacy, legal, and compliance stakeholders to embed cybersecurity into enterprise-level business processes, technology initiatives, and transformation programs.
• Lead the identification, assessment, and communication of complex cybersecurity risks impacting business operations, critical assets, data, and third-party relationships, including risks with significant organizational or regulatory exposure.
• Own cybersecurity engagement across major, high-visibility business initiatives, including solution profiling, risk assessments, control applicability, and remediation planning.
• Translate cybersecurity policies, standards, and regulatory requirements into strategic business guidance and actionable requirements for senior stakeholders and leadership.
• Own and present cybersecurity risk posture, compliance status, open issues, exceptions, and remediation progress for assigned business areas to senior leadership and governance forums.
• Provide mentorship, coaching, and guidance to BISO Managers, supporting their development and consistency of approach across the team.
• Coordinate and lead cross-functional alignment with Cyber GRC, security architecture, privacy, third-party risk, incident response, and technology teams to ensure consistent, enterprise-wide risk management practices.
• Lead business readiness for audits, inspections, regulatory inquiries, and internal assessments, coordinating responses and evidence collection across multiple business areas.
• Advise senior business stakeholders on cybersecurity implications related to new technologies, process changes, data use, cloud adoption, and vendor engagements, including at a strategic and enterprise-risk level.
• Drive organization-wide awareness and adoption of cybersecurity requirements, including data protection, access management, secure technology use, and risk acceptance processes.
• Identify systemic control gaps, risk themes, and process improvement opportunities across business functions, and lead initiatives to address them.
• Prepare and deliver executive-ready reporting, metrics, dashboards, and briefing materials for senior business leadership and cyber governance forums.
• Lead the ongoing enhancement of the BISO operating model, engagement processes, governance routines, and stakeholder communications, contributing directly to the strategic direction of the BISO enablement organization.
• Champion a risk-based, business-aligned cybersecurity culture that enables innovation while protecting company assets, regulated data, and critical operations.

Here Is What You Need (Minimum Requirements)

• Applicant must have a bachelor's degree in Cybersecurity, Information Technology, Risk Management, Business, or a related field with at least 6 years of
  experience in cybersecurity, technology risk, information security, IT governance, compliance, or related disciplines, including demonstrated experience operating at a senior or leadership level; OR a master's degree with at least 5 years of experience in cybersecurity, technology risk, information security, IT governance, compliance, or related disciplines, including demonstrated experience operating at a senior or leadership level; OR a PhD with 1+ years of experience in cybersecurity, technology risk, information security, IT governance, compliance, or related disciplines, including demonstrated experience operating at a senior or leadership level.

…