Information Security Governance Expert

F. Hoffmann-La Roche AG; Madrid; Presencial; EUR 80.000 - 120.000; Jornada completa

Descripción de la vacante

Roche seeks an Expert in Information Security & Privacy Advisory (ISPA) to lead high-impact risk assessments for global engineering hubs. Drive Secure by Design across GenAI and cloud-native platforms while ensuring GDPR/CCPA compliance and alignment with global regulations.

You will bridge IT, Legal, and Data Protection Officers, delivering data-driven, audit-ready guidance and fostering knowledge exchange in a global team of experts.

Formación

• 5–10 years in Information Security/GRC with risk assessments.
• Ability to translate legal mandates (GDPR, CCPA, HIPAA, etc.) into technical controls.
• Certifications like CISSP, CISM, CRISC, CIPP/E, CIPM or ISO 27001 Lead Auditor are highly valued.

Responsabilidades

• Lead Security Expert Reviews (SER) for complex architectures and assess residual risks.
• Bridge IT, Legal, and Data Protection Officers to translate mandates into actionable controls.
• Contribute to Security Design Patterns and Technical Baselines for GenAI and cloud-native ecosystems.
• Utilize ServiceNow IRM to ensure audit-ready results.
• Foster a Four-Eye quality culture through peer reviews across a global team.

Descripción del empleo

PositionAs an Expert within the Information Security & Privacy Advisory (ISPA) team, you move beyond "checking boxes" to become a strategic partner for global Engineering hubs. You will lead high‑impact security and privacy risk assessments, ensuring Roche’s most ambitious digital projects—from GenAI to cloud‑native platforms—are resilient, "Secure by Design," and compliant with global regulations.

Key Responsibilities

• Lead Security Expert Reviews (SER) for complex architectures, performing deep‑dive technical and privacy evaluations to identify and mitigate residual risks.
• Bridge the gap between IT, Legal, and Data Protection Officers to translate complex legal mandates (GDPR, CCPA, etc.) into actionable technical and organizational controls.
• Contribute to Security Design Patterns and Technical Baselines for emerging technologies such as Generative AI and Cloud‑native ecosystems.
• Utilize ServiceNow IRM to ensure the integrity and traceability of security advisory, delivering data‑driven, consistent, and audit‑ready results.
• Foster a "Four‑Eye" quality culture through peer reviews and collective knowledge exchange within a global team of experts.

Qualifications

• 5–10 years in Information Security/GRC with a proven track record in Information Risk Assessments and DPIAs in complex, global environments.
• Deep understanding of Security Architecture and the ability to translate "Legal‑speak" into "Engineering‑speak."
• Expert knowledge of international privacy frameworks (GDPR, CCPA, HIPAA, etc.) and security standards (ISO 27001, NIST).
• Experienced in using ServiceNow IRM to execute and document risk assessments, ensuring consistent, high‑quality, transparent security guidance.
• Degree in Computer Science or Legal. Certifications like CISSP, CISM, CRISC, CIPP/E, CIPM or ISO 27001 Lead Auditor are highly valued.
• Exceptional stakeholder management skills with the ability to drive consensus across a global organization.

Roche is an Equal Opportunity Employer. We believe it’s urgent to deliver medical solutions right now – even as we develop innovations for the future.