Global Cybersecurity & Privacy Risk Manager (SAFe)

Roche; Sant Cugat del Vallès; On-site; EUR 90,000 - 130,000; Full time

Job summary

Roche is seeking a Cybersecurity & Privacy Risk Manager to lead a global risk management framework. You will translate risk data into strategic insights for executives, drive risk assessments, and ensure security-by-design across the enterprise in a SAFe environment.

The role requires 6+ years in cybersecurity/privacy risk management, strong governance skills, and deep regulatory knowledge (GDPR, HIPAA, ISO standards). Collaboration with Security, Legal, and Quality is essential.

Qualifications

• Bachelor’s degree in a relevant field; Master’s degree preferred.
• 6+ years in cybersecurity, privacy risk management, or information security governance in large multinational environments.
• Experience with SAFe and Agile frameworks; familiarity with GDPR and HIPAA; ISO 27001, NIST, CIS.

Responsibilities

• Drive risk assessments across global operations and product groups.
• Prepare executive risk reports and dashboards for decision-makers.
• Define and enforce risk tolerance aligned with business goals and regulatory mandates.
• Provide remediation guidance and drive process improvements with ROI on risk mitigation.
• Collaborate cross-functionally with Security, Privacy, Legal, Quality & Regulatory units.

Skills

Risk management

Governance

Stakeholder communication

SAFe / Agile

Education

Bachelor’s degree in Computer Science, Information Security, Business Information Systems

Master’s degree preferred

Job description

Roche is seeking a Cybersecurity & Privacy Risk Manager to lead a global risk management framework. You will translate risk data into strategic insights for executives, drive risk assessments, and ensure security-by-design across the enterprise in a SAFe environment.

The role requires 6+ years in cybersecurity/privacy risk management, strong governance skills, and deep regulatory knowledge (GDPR, HIPAA, ISO standards). Collaboration with Security, Legal, and Quality is essential.