Manager, Cybersecurity & Information Protection (US)

Pfizer; Pennsylvania; On-site; USD 150,000 - 210,000; Full time

Job summary

Pfizer is seeking a Manager, Information Protection & Technology Privacy within its Cybersecurity GRC team to lead enterprise data protection efforts and act as the primary privacy advisor.

You will oversee cybersecurity and data privacy compliance across the U.S., partner with legal, IT and data protection teams to operationalize controls, and support regulatory assessments and incident response. This is a hybrid role with travel.

Qualifications

• Bachelor's degree in Information Security, CS, or related field with 4+ years in cybersecurity, data protection, or compliance.
• Knowledge of cybersecurity frameworks, privacy laws (US/LatAm), and audits.

Responsibilities

• Oversee cybersecurity and data privacy compliance across the U.S.
• Partner with legal, IT, security, and data protection teams to operationalize controls.
• Manage risks related to sensitive data (IP, regulated, confidential information).
• Lead regulatory assessments, incident response, and security awareness programs.
• Focus on data discovery, classification, and DLP tools.

Skills

Cybersecurity

Data privacy

Regulatory compliance

GRC

Education

Bachelor's degree in Information Security/CS

Tools

GRC platforms

Job description

Role: Manager, Information Protection & Technology Privacy within Pfizer’s Cybersecurity GRC team, leading enterprise data protection efforts and serving as the primary privacy advisor.

Responsibilities

oversee cybersecurity and data privacy compliance across the U.S., partner with legal, IT, security, and data protection teams to operationalize controls, manage risks related to sensitive data (IP, regulated data, confidential information), and support compliance with laws like CCPA/CPRA, HIPAA, and other state/federal regulations. Lead regulatory assessments, incident response, and security awareness initiatives, with a focus on data discovery, classification, and DLP tools.

Qualifications

Bachelor's degree in Information Security, Computer Science, or related field with 4+ years' experience in cybersecurity, data protection, or regulatory compliance; or advanced degrees with relevant experience. Knowledge of cybersecurity frameworks, U.S. and Latin American privacy laws, and experience supporting audits or assessments.

Preferred

professional certifications (e.g., CISSP, CISA), hands-on experience with GRC platforms, and pharmaceutical or healthcare industry background.

High-value

focus on privacy, data protection, regulatory compliance, and risk management in a regulated pharma environment.

Work setup

on-site 2-3 days/week in the U.S., with travel less than 5%. This role involves cross-functional collaboration and ongoing regulatory engagement.