Sr. Manager, Business Information Security Office

Pfizer • New York City, NY

2d • Hybrid

About The Position

Pfizer’s Global Cybersecurity Governance, Risk, and Compliance (GRC) team embeds governance, risk management, and compliance across the organization to support risk-based decision-making and integrate security, privacy, and regulatory compliance. The Senior Manager, Business Information Security Office (BISO) serves as a trusted cybersecurity advisor and strategic liaison between Cybersecurity and business stakeholders. The role leads integration of cybersecurity requirements into major business initiatives, technology programs, and risk decisions, mentors BISO Managers, and contributes to the strategy and maturity of the BISO enablement function.

The position works with senior stakeholders across business, digital, product, quality, privacy, legal, compliance, and technology organizations. It advises on cybersecurity risks and requirements, supports risk and compliance governance, prepares business areas for audits and regulatory inquiries, and advances a business-aligned, risk-based cybersecurity culture. The role is hybrid and requires working in an assigned Pfizer office two to three days per week, or as business needs require. Travel is less than 20% as required by the business.

The annual base salary range is $139,100 to $231,900. The position is eligible for Pfizer’s Global Performance Plan, with a 17.5% bonus target, and a share-based long-term incentive program. Benefits include a 401(k) plan with matching and an additional retirement contribution, paid vacation, holidays and personal days, paid caregiver/parental and medical leave, and medical, prescription drug, dental, and vision coverage. Relocation assistance may be available based on business needs and eligibility. Candidates must have permanent U.S. work authorization; visa sponsorship is not available.

Requirements

• Bachelor’s degree in Cybersecurity, Information Technology, Risk Management, Business, or a related field and at least 6 years of relevant experience, including demonstrated senior or leadership-level experience; OR a master’s degree and at least 5 years of such experience; OR a PhD and at least 1 year of such experience.
• Relevant experience in cybersecurity, technology risk, information security, IT governance, compliance, or related disciplines.
• Proven experience partnering with senior business stakeholders to assess cyber risk, communicate requirements, and drive remediation at enterprise scale.
• Strong, hands-on understanding of cybersecurity frameworks, policies, and controls, such as NIST CSF, ISO 27001, CIS Controls, or related standards, and ability to apply them across business contexts.
• Ability to translate complex technical and risk concepts into clear executive-relevant messaging and strategic recommendations.
• Strong stakeholder management, communication, facilitation, and influencing skills, including experience engaging senior leadership and governance forums.
• Proven experience with GRC platforms, risk registers, control assessment processes, audit support, and exception management.
• Experience mentoring, coaching, or leading cybersecurity or GRC professionals.
• Experience in an agile work environment, with a collaborative mindset, adaptability, and proactive problem-solving approach.
• Must be capable of working through a personal laptop computer or mobile device for extended periods.
• Must be able to work in an assigned Pfizer office two to three days per week, or as needed by the business.
• Must have permanent work authorization in the United States; U.S. work visa sponsorship is not available.

Nice To Haves

• Relevant professional certification such as CISSP, CISA, CRISC, CISM, or similar.
• Experience in a highly regulated environment; pharmaceutical, healthcare, life sciences, or GxP experience is a strong plus.
• Business-minded cybersecurity approach, with a practical, risk-based track record of influencing enterprise-level decisions.
• Ability to build relationships and operate effectively across technical, business, and executive audiences, including C-suite or senior leadership.
• Experience leading initiatives across multiple business units or geographies in a matrixed, global, and regulated environment.
• Detail orientation and strong follow-through, documentation, and issue management skills.
• Ability to balance risk management with business enablement while contributing to broader organizational strategy.
• Experience contributing to or shaping team structures, operating models, or organizational maturity initiatives.

Responsibilities

• Serve as the senior cybersecurity point of contact and trusted advisor for assigned business functions, providing executive-level guidance on cyber risk, policy requirements, and control expectations.
• Partner with senior business, digital, product, quality, privacy, legal, and compliance stakeholders to integrate cybersecurity into business processes, technology initiatives, and transformation programs.
• Lead identification, assessment, and communication of complex cybersecurity risks affecting business operations, critical assets, data, and third-party relationships.
• Own cybersecurity engagement across major initiatives, including solution profiling, risk assessments, control applicability, and remediation planning.
• Translate cybersecurity policies, standards, and regulatory requirements into strategic business guidance and actionable requirements.
• Present cybersecurity risk posture, compliance status, open issues, exceptions, and remediation progress to senior leadership and governance forums.
• Mentor, coach, and guide BISO Managers to support their development and consistency of approach.
• Coordinate cross-functional alignment with Cyber GRC, security architecture, privacy, third-party risk, incident response, and technology teams.
• Lead business readiness for audits, inspections, regulatory inquiries, and internal assessments, coordinating responses and evidence collection across business areas.
• Advise senior business stakeholders on cybersecurity implications of new technologies, process changes, data use, cloud adoption, and vendor engagements.
• Drive awareness and adoption of cybersecurity requirements, including data protection, access management, secure technology use, and risk acceptance processes.
• Identify systemic control gaps, risk themes, and process improvement opportunities, and lead initiatives to address them.
• Prepare executive-ready reporting, metrics, dashboards, and briefing materials for senior business leadership and cybersecurity governance forums.
• Enhance the BISO operating model, engagement processes, governance routines, and stakeholder communications, contributing to the strategic direction of the BISO enablement organization.
• Champion a risk-based, business-aligned cybersecurity culture that enables innovation while protecting company assets, regulated data, and critical operations.

Benefits

• 401(k) plan with Pfizer Matching Contributions and an additional Pfizer Retirement Savings Contribution
• Paid vacation, holiday, and personal days
• Paid caregiver/parental and medical leave
• Medical, prescription drug, dental, and vision coverage
• Global Performance Plan participation with a bonus target of 17.5% of base salary
• Eligibility to participate in a share-based long-term incentive program
• Relocation assistance may be available based on business needs and eligibility

What This Job Offers

• Job Type: Full-time
• Career Level: Manager