Manager, Cybersecurity & Information Protection

Jobtailor; New York (NY); On-site; USD 130,000 - 170,000; Full time

Job summary

Pfizer seeks a senior leader to oversee its enterprise information protection program and act as the chief Technology & Cyber Privacy Advisor within the Cyber GRC organization. You will guide strategies and risk management across the United States, coordinating with business units, legal, and compliance teams.

In this role you will partner with cross-functional teams to advance data protection, ensure regulatory compliance, and drive DLP and data labeling initiatives.

Qualifications

• Bachelor's degree or higher in a relevant field with required work authorization.
• Strong knowledge of US cybersecurity regulations such as CCPA/CPRA, HIPAA, and related laws.
• Experience supporting regulatory inspections, audits, and compliance programs.
• Hands-on familiarity with data protection technologies and encryption concepts.
• Professional proficiency in English; authorized to work in the U.S.

Responsibilities

• Lead and oversee the enterprise information protection program.
• Serve as the primary Technology & Cyber Privacy Advisor within Cyber GRC.
• Advise on cybersecurity, information protection, and data privacy across the United States.
• Partner with stakeholders across Business, Digital & Technology, Privacy, Legal, and Compliance.
• Assess and manage cybersecurity and information protection risks for initiatives and vendors.
• Ensure compliance with U.S. cybersecurity and data protection regulations.
• Support regulatory inspections, audits, and remediation planning.
• Drive security awareness and risk management initiatives.
• Define information protection controls and support data protection policies.
• Deploy and support DLP, data discovery, labeling, and tagging solutions.

Skills

Cybersecurity Governance

Risk Management

Data Privacy

Regulatory Compliance

Data Loss Prevention

Data Discovery

Leadership

Cross-functional Collaboration

Education

Bachelor's degree in Information Security / Computer Science / Information Systems

Master's degree in Information Security

Associate's degree with 8+ years experience

High School diploma with 10 years experience

Tools

DLP Solutions

Data Labeling Solutions

Data Tagging Solutions

Job description

• Lead and oversee Pfizer's enterprise information protection program
• Serve as the primary Technology & Cyber Privacy Advisor within the Cyber GRC organization
• Advise on cybersecurity, information protection, and data privacy matters across the United States
• Partner with Business, Digital & Technology, Privacy, Legal, and Compliance stakeholders on strategic initiatives, transformations, and technology projects
• Assess and manage cybersecurity and information protection risks for business initiatives, applications, digital solutions, and third-party engagements
• Ensure compliance with U.S. cybersecurity and data protection regulations, including CCPA/CPRA, HIPAA, VCDPA, CPA, and CTDPA
• Support regulatory inspections, audits, compliance reviews, and regulatory engagements
• Lead cybersecurity and data protection compliance programs, including regulatory assessments, filings, and remediation planning
• Monitor emerging cybersecurity threats, regulatory developments, and compliance risks
• Drive security awareness, risk management, and information protection initiatives
• Define information protection controls and support development of data protection policies and standards
• Deploy and support DLP, data discovery, data labeling, and data tagging solutions
• Support cybersecurity incident response, escalation, and remediation activities
• Collaborate with stakeholders across multiple time zones, including Latin America-based teams

Requirements

• Bachelor's degree in Information Security, Computer Science, Information Systems, Risk Management, or a related field with 4+ years of relevant experience, including at least 2 years in a supervisory or project leadership capacity; OR a master's degree with at least 2 years of experience; OR an associate's degree with 8 years of experience; OR a high school diploma (or equivalent) and 10 years of relevant experience
• Strong knowledge of cybersecurity governance, risk management, compliance frameworks, and applicable regulatory requirements
• Strong understanding of cybersecurity and data protection regulations, including CCPA/CPRA, HIPAA, and related U.S. state and federal requirements
• Experience supporting cybersecurity assessments, audits, regulatory inspections, compliance programs, or risk management initiatives
• Strong experience and hands-on familiarity with technologies to build data discovery, classification, and data loss prevention programs
• Working knowledge of data encryption concepts and approaches across different environments
• Professional proficiency in English
• Candidates must be authorized to be employed in the U.S. by any employer
• Permanent work authorization in the United States is required
• U.S. work visa sponsorship is not available now or in the future

Core Competencies

Demonstrates expertise in cybersecurity governance, risk management, and compliance with U.S. regulations such as CCPA/CPRA and HIPAA. Proven ability to lead information protection initiatives and collaborate with cross-functional teams to manage cybersecurity risks and ensure regulatory compliance.

Highest-signal resume keywords

• Cybersecurity Governance
• Risk Management
• Data Protection Compliance
• Data Loss Prevention Technologies
• Regulatory Assessments

ATS Optimization Keywords

Hard Skills

• Information Security
• Cybersecurity
• Risk Management
• Data Privacy
• Data Discovery
• Data Classification
• Data Loss Prevention
• Data Encryption
• Compliance Frameworks
• Cybersecurity Audits

Soft Skills

• Leadership
• Collaboration
• Communication

Industry Keywords

• CCPA
• CPRA
• HIPAA
• VCDPA
• CPA
• CTDPA

Tools & Technologies

• DLP Solutions
• Data Tagging Solutions
• Data Labeling Solutions