Manager, Cybersecurity & Information Protection (US)

Pfizer • Collegeville, PA

7d • $106,000 - $176,600 • Hybrid

About The Position

Pfizer’s Global Cybersecurity Governance, Risk, and Compliance (GRC) team embeds governance, risk management, and compliance throughout the organization to support risk-based decision-making and the integration of security, privacy, and regulatory compliance. The Manager, Cybersecurity & Information Protection leads and oversees the enterprise information protection program and serves as the primary Technology and Cyber Privacy Advisor within Cyber GRC. The role ensures sensitive data, including intellectual property, regulated data, and confidential business information, is appropriately classified, protected, and handled in alignment with Pfizer policies, regulatory expectations, and risk tolerance.

The role partners with Data Protection Engineering, Privacy, Legal, IT, Security Operations, the DPO office, and business stakeholders to operationalize controls, drive adoption of data protection standards, and support ongoing compliance in a regulated pharmaceutical environment. It also helps Business Units navigate privacy obligations across multiple jurisdictions. The position is not remote and requires working in an assigned Pfizer office two to three days per week, or as business needs require. Travel is as required by the business and expected to be less than 5% domestically and/or internationally. The position requires flexibility to collaborate across time zones, including occasional coordination with Latin America-based teams.

Requirements

• Bachelor’s degree in Information Security, Computer Science, Information Systems, Risk Management, or a related field and at least 4 years of relevant experience, including at least 2 years in a supervisory or project leadership capacity; alternatively, a master’s degree and at least 2 years of experience, an associate’s degree and 8 years of experience, or a high school diploma or equivalent and 10 years of relevant experience.
• Strong knowledge of cybersecurity governance, risk management, compliance frameworks, and applicable regulatory requirements.
• Strong understanding of cybersecurity and data protection regulations, including CCPA/CPRA, HIPAA, and related U.S. state and federal requirements.
• Experience supporting cybersecurity assessments, audits, regulatory inspections, compliance programs, or risk management initiatives.
• Working knowledge of data encryption concepts and approaches across different environments.
• Strong stakeholder management, communication, and influencing skills, with the ability to work across business and technology functions in a global environment.
• Strong project coordination skills across business and technical teams.
• Professional proficiency in English.
• Ability to work in an assigned Pfizer office two to three days per week, or as needed by the business; the role is not remote.
• Ability to work through a personal laptop computer or mobile device for extended periods.
• Ability to travel as required by the business; travel is less than 5% domestic and/or international.
• Must be authorized to work in the United States by any employer; U.S. work visa sponsorship is not available. The position requires permanent U.S. work authorization.

Nice To Haves

• Knowledge of data protection and cybersecurity regulations across Latin America, such as Brazil’s LGPD and Mexico’s Federal Law on Protection of Personal Data.
• Strong hands-on familiarity with technologies used to build data discovery, classification, and data loss prevention programs.
• Spanish or Portuguese language skills.
• Professional certifications such as CISSP, CISA, CISM, CRISC, CIPP/E, CIPM, or equivalent.
• Experience supporting cybersecurity, information protection, data privacy, or regulatory compliance programs in the pharmaceutical, healthcare, or life sciences industry.
• Hands-on experience with GRC platforms such as Archer.
• Familiarity with privacy, intellectual property protection, and regulated data environments.

Responsibilities

• Act as a trusted advisor on cybersecurity, information protection, and data privacy matters across the United States.
• Partner with Business, Digital & Technology, Privacy, Legal, and Compliance stakeholders to provide practical guidance for strategic initiatives, business transformations, and technology projects.
• Assess and manage cybersecurity and information protection risks associated with business initiatives, applications, digital solutions, and third-party engagements.
• Ensure compliance with applicable U.S. cybersecurity and data protection regulations, including CCPA/CPRA, HIPAA, state privacy laws, and related requirements.
• Support regulatory inspections, audits, compliance reviews, and regulatory engagements as required.
• Lead cybersecurity and data protection compliance programs, including regulatory assessments, filings, remediation planning, and related activities.
• Monitor emerging cybersecurity threats, regulatory developments, and compliance risks, and drive security awareness, risk management, and information protection initiatives.
• Help define information protection controls to support regulatory compliance.
• Use data loss prevention and data discovery tools and data labeling and tagging solutions, including deployment and ongoing support.
• Support development of data protection policies and standards.
• Support cybersecurity incident response, escalation, and remediation activities when required.
• Collaborate with stakeholders across multiple time zones, including occasional coordination with Latin America-based teams.

Benefits

• 401(k) plan with Pfizer matching contributions and an additional Pfizer Retirement Savings Contribution.
• Paid vacation, holiday, and personal days.
• Paid caregiver, parental, and medical leave.
• Medical, prescription drug, dental, and vision coverage.
• Eligibility for Pfizer’s Global Performance Plan with a 15% target bonus.
• Eligibility to participate in a share-based long-term incentive program.
• Relocation assistance may be available based on business needs and/or eligibility.

What This Job Offers

• Job Type: Full-time
• Career Level: Manager