Manager, Security, Governance, Risk and Compliance

Jazz Pharmaceuticals•US - Home-Based - PA, PA

3d•$134,400 - $201,600•Remote

About The Position

Jazz Pharmaceuticals is a global biopharma company whose purpose is to innovate to transform the lives of patients and their families. We are dedicated to developing life-changing medicines for people with serious diseases — often with limited or no therapeutic options. We have a diverse portfolio of marketed medicines, including leading therapies for sleep disorders and epilepsy, and a growing portfolio of cancer treatments. Our patient-focused and science-driven approach powers pioneering research and development advancements across our robust pipeline of innovative therapeutics in oncology and neuroscience. Jazz is headquartered in Dublin, Ireland with research and development laboratories, manufacturing facilities and employees in multiple countries committed to serving patients worldwide. Please visit www.jazzpharmaceuticals.com for more information.

Requirements

Experience in security program management, cloud security, SaaS governance, and SGRC functions.
Strong knowledge of security frameworks (e.g., NIST, ISO 27001, OWASP).
Demonstrated ability to operationalize policies into effective technical and procedural controls.
Ability to influence cross-functional teams and effectively communicate risk to stakeholders at multiple levels.
Familiarity with enterprise SaaS platforms and cloud security control environments.
Experience supporting audits, compliance programs, and continuous control monitoring.
Knowledge of identity and access management (IAM), data protection, and SaaS security architectures.
Experience with metrics-driven security programs, including KPI/KRI development and reporting.
Demonstrated ability to work effectively with business partners.
Strong analytical, organizational, and stakeholder management skills.
5 years of experience in information security, cybersecurity governance, risk management, compliance, cloud security, or related disciplines.
Bachelor's degree

Nice To Haves

CISSP, CISM, CRISC, CCSK, or comparable security certification preferred.
Cloud security certifications (AWS, Azure, or GCP) preferred.

Responsibilities

Coordinate, partner, and align security activities across security and IT teams supporting enterprise platforms and SaaS/PaaS environments.
Support implementation and ongoing maintenance of SaaS security governance processes aligned with internal policies, regulatory requirements, and industry standards.
Coordinate security initiatives across core platforms and provide status reporting, issue tracking, and risk visibility to leadership.
Track and report key risk indicators (KRIs), metrics, and compliance status to support decision-making and continuous improvement.
Help define, implement, and maintain security baselines, standards, and control frameworks for SaaS and PaaS solutions.
Support control lifecycle management, including control definition, documentation, and validation.
Assist in mapping controls to applicable frameworks (e.g., NIST, ISO 27001, OWASP) and support consistent implementation.
Support internal and external audits by ensuring audit readiness and evidence collection.
Help coordinate and support security assessments, testing activities, and risk evaluations.
Coordinate activities within the security exception process, including risk documentation, stakeholder engagement, approval tracking, and remediation follow-up.
Monitor exception trends related to SaaS and PaaS workloads.
Help coordinate security governance for critical platforms including Workday, Salesforce, Snowflake, ServiceNow, and Microsoft 365.
Support implementation and ongoing maintenance of approved security baselines for new and existing platform implementations.
Coordinate continuous control monitoring activities and assist in identifying configuration drift or compliance gaps.
Partner with platform owners to integrate security into configuration, change, and release management processes.
Partner with business stakeholders to influence secure adoption and improve operational security maturity.
Collaborate with IAM and data governance teams to ensure strong access controls, RBAC models, and data protection practices across SaaS platforms.
Act as a liaison between security, compliance, IT, and business teams to support alignment, communication, and issue resolution.
Coordinate with business stakeholders and vendors to ensure SaaS and PaaS solutions complete the SGRC Vendor Risk Management process and maintain required assessments.