Security Governance & Privacy Strategist

F. Hoffmann-La Roche AG; Madrid; On-site; EUR 90,000 - 130,000; Full time

Job summary

Roche is seeking an Expert within the ISPA team to drive strategic security and privacy risk assessments for global engineering hubs, ensuring GenAI and cloud-native initiatives are Secure by Design and compliant with international standards.

You will translate legal mandates into technical controls, lead high-impact reviews, and collaborate across IT, legal and data protection to deliver audit-ready guidance.

Qualifications

• 5–10 years in Information Security/GRC with risk assessments and DPIAs in global settings.
• Ability to translate regulatory mandates into technical and organizational controls.
• Experience with security architecture and modern technologies (GenAI, cloud-native).

Responsibilities

• Lead Security Expert Reviews for complex architectures, identifying residual risks.
• Bridge IT, Legal, and Data Protection Officers to implement controls.
• Develop security design patterns and baselines for GenAI and cloud-native ecosystems.
• Utilize ServiceNow IRM to ensure traceability and audit-ready results.
• Foster peer excellence and knowledge exchange within a global team.

Skills

Security Architecture

Information Security & GRC

Regulatory Knowledge (GDPR, CCPA)

Communication & Stakeholder mgmt

ISO27001/NIST knowledge

Education

Degree in Computer Science or Legal

Tools

ServiceNow IRM

Job description

Roche is seeking an Expert within the ISPA team to drive strategic security and privacy risk assessments for global engineering hubs, ensuring GenAI and cloud-native initiatives are Secure by Design and compliant with international standards.

You will translate legal mandates into technical controls, lead high-impact reviews, and collaborate across IT, legal and data protection to deliver audit-ready guidance.