Strategic InfoSec & Privacy Governance Expert

F. Hoffmann-La Roche AG; Madrid; On-site; EUR 90,000 - 120,000; Full time

Job summary

Roche is seeking an Expert within Information Security & Privacy Advisory (ISPA) to act as a high-impact partner for System Owners and global hubs, driving Security and Privacy-by-Design across AI platforms, cloud-native security and enterprise systems.

You will lead risk assessments, guide ISMS implementation, and translate complex regulatory requirements into actionable controls, collaborating with IT, Legal and DPOs to protect Roche's data and operations worldwide.

Qualifications

• 10+ years in IT security, governance, risk and compliance (GRC).
• Experience conducting Information Risk Assessments and DPIAs.
• Deep knowledge of GDPR, CCPA/CPRA and cross-border data transfer reviews.
• Proven ability to translate technical risks into business-impact guidance.

Responsibilities

• Provide expert advisory and risk mitigation for complex systems.
• Lead high-risk reviews and define risk-owning controls with stakeholders.
• Bridge IT, Legal and DPOs to implement privacy-by-design measures.
• Advise on ISMS governance and regulatory alignment across global teams.

Skills

GRC

Risk assessment

Privacy by design

GDPR/CCPA

ISMS guidance

Stakeholder mgmt

Education

Degree in CS, Law or IT

Tools

ServiceNow IRM

ISO 27001

Job description

Roche is seeking an Expert within Information Security & Privacy Advisory (ISPA) to act as a high-impact partner for System Owners and global hubs, driving Security and Privacy-by-Design across AI platforms, cloud-native security and enterprise systems.

You will lead risk assessments, guide ISMS implementation, and translate complex regulatory requirements into actionable controls, collaborating with IT, Legal and DPOs to protect Roche's data and operations worldwide.