Manager, Cyber Policy, Governance, Standards & Control Management

Pfizer; New York (NY); On-site; USD 140,000 - 210,000; Full time

Job summary

Pfizer is seeking a Manager, Cyber Policy, Governance, Standards & Control Management within its Cyber GRC team. Lead development and oversight of enterprise cybersecurity policies, standards, and governance processes across the organization to manage risk and ensure regulatory alignment.

You will collaborate with control owners and cross-functional partners, drive metrics, and support audits while mentoring governance professionals in a hybrid work environment.

Qualifications

• Bachelor's degree in a relevant field is required.
• 4+ years in cybersecurity, GRC, or risk management.
• Strong knowledge of cybersecurity frameworks and standards.
• Excellent communication and strategic thinking skills.
• Experience with GRC tools like Archer.

Responsibilities

• Manage lifecycle of cybersecurity policies.
• Establish governance frameworks and oversee standards.
• Develop metrics and KPIs to track policy effectiveness.
• Support mapping controls to industry standards (NIST CSF 2.0, ISO 27001, NIST 800-53).
• Collaborate with control owners and cross-functional teams to address risks and compliance.
• Support audits and assessments.
• Lead and mentor governance professionals.

Skills

Cybersecurity frameworks

GRC knowledge

Strategic thinking

Communication skills

Education

Bachelor's degree

Tools

Archer

Job description

Role:

Manager, Cyber Policy, Governance, Standards & Control Management within Pfizer's Cyber GRC team, leading development and oversight of enterprise cybersecurity policies, standards, and governance processes.

Responsibilities:

• manage lifecycle of cybersecurity policies
• establish governance frameworks
• develop metrics and KPIs
• support mapping controls to industry and regulatory standards such as NIST CSF 2.0, ISO 27001, and NIST 800-53
• collaborate with control owners and cross-functional teams to address risks, gaps, and compliance
• support audits and assessments
• lead and mentor governance professionals

Requirements:

• Bachelor's degree
• 4+ years in cybersecurity, GRC, or risk management
• strong knowledge of cybersecurity frameworks and standards
• excellent communication and strategic thinking skills
• experience with GRC tools like Archer

Preferred:

• analytical capability
• influencing senior leadership
• structured problem-solving
• self-motivation
• adaptability

High-Value:

cybersecurity governance in a global pharmaceutical environment; regulatory compliance focus; collaboration with Legal, Privacy, Quality, and Risk functions.

Work setup:

hybrid (onsite 2-3 days/week in designated Pfizer office); minimal travel (<5%).