GRC & Security Program Lead — SaaS/Cloud

Biopharma Careers; Pennsylvania; On-site; USD 134,000 - 202,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

401k plan

Flexible vacation

Job summary

Jazz Pharmaceuticals, Inc. is seeking an experienced information security leader to drive program management, cloud security governance, and risk management across SaaS and PaaS platforms in a global setting.

The role requires deep knowledge of security frameworks, strong stakeholder engagement, and hands-on experience with audits and continuous monitoring to protect sensitive data and critical systems.

Qualifications

• Experience in security program management, cloud security, SaaS governance, and SGRC functions.
• Strong knowledge of security frameworks (e.g., NIST, ISO 27001, OWASP).
• Demonstrated ability to operationalize policies into effective technical and procedural controls.
• Ability to influence cross-functional teams and effectively communicate risk to stakeholders at multiple levels.
• Familiarity with enterprise SaaS platforms and cloud security control environments.
• Experience supporting audits, compliance programs, and continuous control monitoring.
• Knowledge of identity and access management (IAM), data protection, and SaaS security architectures.
• Experience with metrics-driven security programs, including KPI/KRI development and reporting.
• Demonstrated ability to work effectively with business partners.
• Strong analytical, organizational, and stakeholder management skills.

Responsibilities

• Coordinate security activities across security and IT teams supporting enterprise platforms and SaaS/PaaS environments.
• Support implementation and ongoing maintenance of SaaS security governance processes aligned with internal policies, regulatory requirements, and industry standards.
• Coordinate security initiatives across core platforms and provide status reporting, issue tracking, and risk visibility to leadership.
• Track and report key risk indicators (KRIs), metrics, and compliance status to support decision-making and continuous improvement.
• Help define, implement, and maintain security baselines, standards, and control frameworks for SaaS and PaaS solutions.
• Support control lifecycle management, including control definition, documentation, and validation.
• Assist in mapping controls to applicable frameworks (e.g., NIST, ISO 27001, OWASP) and support consistent implementation.
• Support internal and external audits by ensuring audit readiness and evidence collection.
• Help coordinate and support security assessments, testing activities, and risk evaluations.
• Coordinate activities within the security exception process, including risk documentation, stakeholder engagement, approval tracking, and remediation follow-up.
• Monitor exception trends related to SaaS and PaaS workloads.
• Help coordinate security governance for critical platforms including Workday, Salesforce, Snowflake, ServiceNow, and Microsoft 365.
• Support implementation and ongoing maintenance of approved security baselines for new and existing platform implementations.
• Coordinate continuous control monitoring activities and assist in identifying configuration drift or compliance gaps.
• Partner with platform owners to integrate security into configuration, change, and release management processes.
• Partner with business stakeholders to influence secure adoption and improve operational security maturity.
• Collaborate with IAM and data governance teams to ensure strong access controls, RBAC models, and data protection practices across SaaS platforms.
• Act as a liaison between security, compliance, IT, and business teams to support alignment, communication, and issue resolution.
• Coordinate with business stakeholders and vendors to ensure SaaS and PaaS solutions complete the SGRC Vendor Risk Management process and maintain required assessments.

Skills

Security program management

Cloud security

SaaS governance

Risk management

Stakeholder management

IAM & data protection

KPI/KRI reporting

Education

Bachelor's degree

CISSP

CISM

CRISC

CCSK

Cloud security certs (AWS,AWS/Azure/GCP)

Job description

Jazz Pharmaceuticals, Inc. is seeking an experienced information security leader to drive program management, cloud security governance, and risk management across SaaS and PaaS platforms in a global setting.

The role requires deep knowledge of security frameworks, strong stakeholder engagement, and hands-on experience with audits and continuous monitoring to protect sensitive data and critical systems.