Manager, Security, Governance, Risk and Compliance

Jazz Pharmaceuticals; Northern (KY); Hybrid; USD 120,000 - 180,000; Full time

Job summary

Jazz Pharmaceuticals is seeking a Program & Governance Leader to drive security program management across enterprise platforms and SaaS/PaaS environments. You will coordinate security governance, risk management, and compliance across teams, reporting to leadership.

Ideal candidates have extensive experience with NIST, ISO 27001, OWASP, audits, and continuous control monitoring, and can partner with IAM, data governance, and business units to mature security maturity.

Qualifications

• Experience in security program management, cloud security, SaaS governance, and SGRC.
• Strong knowledge of security frameworks (NIST, ISO 27001, OWASP).
• Ability to operationalize policies into technical and procedural controls.
• Ability to influence cross-functional teams and communicate risk to leadership.
• Familiarity with enterprise SaaS platforms and cloud security environments.
• Experience supporting audits and control monitoring.
• Knowledge of IAM, data protection, and security architectures.
• Experience with KPI/KRI reporting.

Responsibilities

• Coordinate, partner, and align security activities across security and IT teams supporting enterprise platforms and SaaS/PaaS environments.
• Support implementation and ongoing maintenance of SaaS security governance processes aligned with internal policies, regulatory requirements, and industry standards.
• Coordinate security initiatives across core platforms and provide status reporting, issue tracking, and risk visibility to leadership.
• Track and report key risk indicators (KRIs), metrics, and compliance status to support decision-making and continuous improvement.
• Help define, implement, and maintain security baselines, standards, and control frameworks for SaaS and PaaS solutions.
• Support control lifecycle management, including control definition, documentation, and validation.
• Assist in mapping controls to applicable frameworks (e.g., NIST, ISO 27001, OWASP) and support consistent implementation.
• Support internal and external audits by ensuring audit readiness and evidence collection.
• Help coordinate and support security assessments, testing activities, and risk evaluations.
• Coordinate activities within the security exception process, including risk documentation, stakeholder engagement, approval tracking, and remediation follow-up.
• Monitor exception trends related to SaaS and PaaS workloads.
• Help coordinate security governance for critical platforms including Workday, Salesforce, Snowflake, ServiceNow, and Microsoft 365.
• Support implementation and ongoing maintenance of approved security baselines for new and existing platform implementations.
• Coordinate continuous control monitoring activities and assist in identifying configuration drift or compliance gaps.
• Partner with platform owners to integrate security into configuration, change, and release management processes.
• Partner with business stakeholders to influence secure adoption and improve operational security maturity.
• Collaborate with IAM and data governance teams to ensure strong access controls, RBAC models, and data protection practices across SaaS platforms.
• Act as a liaison between security, compliance, IT, and business teams to support alignment, communication, and issue resolution.
• Coordinate with business stakeholders and vendors to ensure SaaS and PaaS solutions complete the SGRC Vendor Risk Management process and maintain required assessments.
• Experience in security program management, cloud security, SaaS governance, and SGRC functions.
• Strong knowledge of security frameworks (e.g., NIST, ISO 27001, OWASP).
• Demonstrated ability to operationalize policies into effective technical and procedural controls.
• Ability to influence cross-functional teams and effectively communicate risk to stakeholders at multiple levels.
• Familiarity with enterprise SaaS platforms and cloud security control environments.
• Experience supporting audits, compliance programs, and continuous control monitoring.
• Knowledge of identity and access management (IAM), data protection, and SaaS security architectures.
• Experience with metrics-driven security programs, including KPI/KRI development and reporting.
• Demonstrated ability to work effectively with business partners.
• Strong analytical, organizational, and stakeholder management skills.
• 5 years of experience in information security, cybersecurity governance, risk management, compliance, cloud security, or related disciplines.

Skills

Security PM

Cloud security

SGRC basics

NIST / ISO 27001

Audits & compliance

Stakeholder management

IAM & data governance

Risk reporting

Education

Bachelor's degree

Job description

Job Responsibilities

Program & Governance Leadership

• Coordinate, partner, and align security activities across security and IT teams supporting enterprise platforms and SaaS/PaaS environments.

• Support implementation and ongoing maintenance of SaaS security governance processes aligned with internal policies, regulatory requirements, and industry standards.

• Coordinate security initiatives across core platforms and provide status reporting, issue tracking, and risk visibility to leadership.

• Track and report key risk indicators (KRIs), metrics, and compliance status to support decision-making and continuous improvement.

Control Management & Compliance Operations

• Help define, implement, andmaintainsecurity baselines, standards, and control frameworks for SaaS and PaaS solutions.

• Support control lifecycle management, including control definition, documentation, and validation.

• Assistin mapping controls to applicable frameworks (e.g., NIST, ISO 27001, OWASP) and support consistent implementation.

• Support internal and external audits by ensuring audit readiness andevidencecollection.

• Help coordinate and support security assessments, testing activities, and risk evaluations.

Risk & Exception Management

• Coordinate activities within the security exception process, including risk documentation, stakeholder engagement, approval tracking, and remediation follow-up.

• Monitor exception trends related to SaaS and PaaS workloads.

SaaS Security & Platform Governance

• Help coordinate security governance for critical platforms including Workday, Salesforce, Snowflake, ServiceNow, and Microsoft 365.

• Support implementation and ongoing maintenance of approved security baselines for new and existing platform implementations.

• Coordinate continuous control monitoring activities and assist in identifying configuration drift or compliance gaps.

• Partner with platform owners to integrate security into configuration, change, and release management processes.

Stakeholder Engagement & Enablement

• Partner with business stakeholders to influence secure adoption and improve operational security maturity.

• Collaborate with IAM and data governance teams to ensure strong access controls, RBAC models, and data protection practices across SaaS platforms.

• Act as a liaison between security, compliance, IT, and business teams to support alignment, communication, and issue resolution.

Third-Party Risk & Vendor Security

• Coordinate with business stakeholders and vendors to ensure SaaS and PaaS solutions complete the SGRC Vendor Risk Management process andmaintainrequired assessments.

Required Knowledge, Skills, and Abilities

• Experience in security program management, cloud security, SaaS governance, and SGRC functions.

• Strong knowledge of security frameworks (e.g., NIST, ISO 27001, OWASP).

• Demonstrated ability to operationalize policies into effective technical and procedural controls.

• Ability to influence cross-functional teams and effectively communicate risk to stakeholders at multiple levels.

• Familiarity with enterprise SaaS platforms and cloud security control environments.

• Experience supporting audits, compliance programs, and continuous control monitoring.

• Knowledge of identity and access management (IAM), data protection, and SaaS security architectures.

• Experience with metrics-driven security programs, including KPI/KRI development and reporting.

• Demonstrated ability to work effectively with business partners.

• Strong analytical, organizational, and stakeholder management skills.

• 5 years of experience in information security, cybersecurity governance, risk management, compliance, cloud security, or related disciplines.

Required/Preferred Education and Licenses

• Bachelor's degree

• CISSP, CISM, CRISC, CCSK, or comparable security certification preferred.

• Cloud security certifications (AWS, Azure, or GCP)preferred.

• AI Training

#LI-Remote