Principle Chapter Lead, Risk and Compliance

Astellas; Markham; Hybrid; CAD 90,000 - 130,000; Full time

Job summary

A global pharmaceutical company is seeking a role focusing on enhancing security governance and compliance. The position involves leading a digital security team, developing risk management frameworks, and ensuring adherence to regulatory requirements. Strong leadership and an understanding of information security are crucial for this role. Located in Canada, hybrid work options may be available.

Qualifications

• Proven experience in leading teams in digital security.
• Strong understanding of compliance and regulatory frameworks.
• Experience in risk management and governance.

Responsibilities

• Develop and coach a global digital security team.
• Establish and lead risk management programs.
• Monitor DigitalX audits and ensure compliance.

Skills

Team leadership

Risk management

Compliance governance

Information security

Communication skills

Education

Relevant degree in cybersecurity or IT

Tools

Risk management software

AI governance technologies

Job description

Do you want to be part of an inclusive team that works to develop innovative therapies for patients? Every day, we are driven to develop and deliver innovative and effective new medicines to patients and physicians. If you want to be part of this exciting work, you belong at Astellas!

Astellas Pharma Inc. is a pharmaceutical company conducting business in more than 70 countries around the world. We are committed to turning innovative science into medical solutions that bring value and hope to patients and their families. Keeping our focus on addressing unmet medical needs and conducting our business with ethics and integrity enables us to improve the health of people throughout the world. For more information on Astellas, please visit our website at www.astellas.com.

This position is based in Northbrook, Illinois. Hybrid work from certain states may be permitted in accordance with Astellas’ Responsible Flexibility Guidelines. Candidates interested in hybrid work are encouraged to apply.

Purpose :

This global role will play a crucial part in overseeing and enhancing the governance, risk management, and compliance of Astellas' security practices.

Essential Job Responsibilities :

• Develop and coach a high-performing global team in various disciplines within DigitalX including Information Security, PODs and Value Teams.
• Product Security and Infrastructure Risk and Compliance
• Develop and continuously evolve a strong governance, risk, and compliance framework for Astellas' security practices
• Partner closely with Legal and Ethics & Compliance to ensure adherence to relevant laws and regulatory requirements
• Establish and lead a comprehensive risk management program to identify, assess, mitigate and monitor security risks across the organization
• Revamp and lead the Third-Party Risk Management program, ensuring that security risks associated with third-party relationships are identified and managed effectively
• Establish a comprehensive data security strategy that aligns with the overarching objectives of the information security program
• Lead the development and implementation of an AI governance strategy, ensuring effective operationalization of AI technologies across the organization
• Ensure infrastructure platforms are secure, reliable and capable of supporting Astellas
• Serve as the primary liaison for all DigitalX audit activities, internal assessments, and regulatory engagements, ensuring collaborative communication and coordination among all involved.
• Monitor and report on all DigitalX audits, ensuring timely remediation of identified issues and transparent communication to relevant stakeholders
• Revamp DigitalX policies, standards, and procedure documentation to eliminate redundancies, streamline processes and reduce amount of training time required
• Establish internal assessment program to evaluate Astellas’ cybersecurity maturity, continuously benchmarking against peers and industry standards
• Ensure that all contracts incorporate appropriate security language to safeguard sensitive information and establish clear responsibilities for data protection and compliance.
• Oversee security initiatives in China, ensuring compliance with China-specific regulations and fostering a strong security culture within the region
• Own all DigitalX LMS training to ensure the development, delivery, and continuous improvement of DigitalX training