Global Security & Privacy Advisory Lead

Jobgether; Madrid; Remote; EUR 90,000 - 130,000; Full time

Job summary

Roche is seeking an Expert in Information Security & Privacy Governance within ISPA to lead high-impact risk assessments and advocate for Security and Privacy-by-Design. You will bridge IT, business, and legal functions to implement controls for complex digital initiatives, including AI platforms, cloud security, and data platforms.

The role requires deep experience in governance, risk, and compliance across global environments, with hands-on advisory for cross-functional teams and enterprise

Qualifications

• 10+ years in IT security, GRC in global environments.
• Experience in Information Risk Assessments and DPIA.
• Knowledge of GDPR, CCPA/CPRA and cross-border data transfer regimes.
• Ability to translate legal requirements into technical controls.

Responsibilities

• Lead Security Expert Reviews for high-risk systems and privacy evaluations.
• Define risk controls with business and tech stakeholders; assign accountability.
• Advise on ISMS guidance and regulatory compliance; support cross-functional teams.

Skills

IT security

GRC

Privacy by design

Privacy frameworks

Education

Degree in Computer Science/Law/IT

Tools

ServiceNow IRM

ISMS

ISO 27001

Job description

Roche is seeking an Expert in Information Security & Privacy Governance within ISPA to lead high-impact risk assessments and advocate for Security and Privacy-by-Design. You will bridge IT, business, and legal functions to implement controls for complex digital initiatives, including AI platforms, cloud security, and data platforms.

The role requires deep experience in governance, risk, and compliance across global environments, with hands-on advisory for cross-functional teams and enterprise