Manager, Security, Governance, Risk and Compliance

BioSpace; Palo Alto (CA); On-site; USD 134,000 - 202,000; Full time

Job summary

Jazz Pharmaceuticals is seeking a Security Program Governance Leader to coordinate security activities across enterprise platforms and SaaS/PaaS environments. You will define baselines, map controls to frameworks, and drive audit readiness.

The role requires experience in information security, cloud security, and governance, with strong stakeholder management across business units.

Qualifications

• Experience in security program management, cloud security, SaaS governance, and SGRC functions.
• Strong knowledge of security frameworks (NIST, ISO 27001, OWASP).
• Ability to operationalize policies into effective technical and procedural controls.
• Ability to influence cross-functional teams and communicate risk to stakeholders at multiple levels.

Responsibilities

• Coordinate security activities across security and IT teams for enterprise platforms and SaaS/PaaS environments.
• Support SaaS security governance processes aligned with policies and industry standards.
• Provide status reporting, risk visibility, and KRIs to leadership.
• Assist audits by ensuring evidence collection and audit readiness.
• Coordinate and support security assessments and risk evaluations.
• Coordinate security governance for platforms like Workday, Salesforce, Snowflake, ServiceNow, and Microsoft 365.
• Collaborate with IAM and data governance for access controls across SaaS platforms.
• Act as liaison between security, compliance, IT, and business teams for alignment.

Skills

Security program management

Cloud security

SaaS governance

SGRC

NIST

ISO 27001

OWASP

IAM

Data protection

KPI/KRI reporting

Education

Bachelor's degree

Security certifications (CISSP/CISM/CRISC/CCSK)

Cloud security certifications (AWS/Azure/GCP)

AI Training

Job description

Jazz Pharmaceuticals is a global biopharma company whose purpose is to innovate to transform the lives of patients and their families. We are dedicated to developing life-changing medicines for people with serious diseases — often with limited or no therapeutic options. We have a diverse portfolio of marketed medicines, including leading therapies for sleep disorders and epilepsy, and a growing portfolio of cancer treatments. Our patient-focused and science-driven approach powers pioneering research and development advancements across our robust pipeline of innovative therapeutics in oncology and neuroscience. Jazz is headquartered in Dublin, Ireland with research and development laboratories, manufacturing facilities and employees in multiple countries committed to serving patients worldwide. Please visit www.jazzpharmaceuticals.com for more information.

Job Responsibilities

Program & Governance Leadership

• Coordinate, partner, and align security activities across security and IT teams supporting enterprise platforms and SaaS/PaaS environments.
• Support implementation and ongoing maintenance of SaaS security governance processes aligned with internal policies, regulatory requirements, and industry standards.
• Coordinate security initiatives across core platforms and provide status reporting, issue tracking, and risk visibility to leadership.
• Track and report key risk indicators (KRIs), metrics, and compliance status to support decision-making and continuous improvement.

Control Management & Compliance Operations

• Help define, implement, and maintain security baselines, standards, and control frameworks for SaaS and PaaS solutions.
• Support control lifecycle management, including control definition, documentation, and validation.
• Assist in mapping controls to applicable frameworks (e.g., NIST, ISO 27001, OWASP) and support consistent implementation.
• Support internal and external audits by ensuring audit readiness and evidence collection.
• Help coordinate and support security assessments, testing activities, and risk evaluations.

Risk & Exception Management

• Coordinate activities within the security exception process, including risk documentation, stakeholder engagement, approval tracking, and remediation follow-up.
• Monitor exception trends related to SaaS and PaaS workloads.

SaaS Security & Platform Governance

• Help coordinate security governance for critical platforms including Workday, Salesforce, Snowflake, ServiceNow, and Microsoft 365.
• Support implementation and ongoing maintenance of approved security baselines for new and existing platform implementations.
• Coordinate continuous control monitoring activities and assist in identifying configuration drift or compliance gaps.
• Partner with platform owners to integrate security into configuration, change, and release management processes.

Stakeholder Engagement & Enablement

• Partner with business stakeholders to influence secure adoption and improve operational security maturity.
• Collaborate with IAM and data governance teams to ensure strong access controls, RBAC models, and data protection practices across SaaS platforms.
• Act as a liaison between security, compliance, IT, and business teams to support alignment, communication, and issue resolution.

Third-Party Risk & Vendor Security

• Coordinate with business stakeholders and vendors to ensure SaaS and PaaS solutions complete the SGRC Vendor Risk Management process and maintain required assessments.

Required Knowledge, Skills, And Abilities

• Experience in security program management, cloud security, SaaS governance, and SGRC functions.
• Strong knowledge of security frameworks (e.g., NIST, ISO 27001, OWASP).
• Demonstrated ability to operationalize policies into effective technical and procedural controls.
• Ability to influence cross-functional teams and effectively communicate risk to stakeholders at multiple levels.
• Familiarity with enterprise SaaS platforms and cloud security control environments.
• Experience supporting audits, compliance programs, and continuous control monitoring.
• Knowledge of identity and access management (IAM), data protection, and SaaS security architectures.
• Experience with metrics-driven security programs, including KPI/KRI development and reporting.
• Demonstrated ability to work effectively with business partners.
• Strong analytical, organizational, and stakeholder management skills.
• 5 years of experience in information security, cybersecurity governance, risk management, compliance, cloud security, or related disciplines.

Required/Preferred Education And Licenses

• Bachelor's degree
• CISSP, CISM, CRISC, CCSK, or comparable security certification preferred.
• Cloud security certifications (AWS, Azure, or GCP) preferred.
• AI Training

Jazz Pharmaceuticals is an equal opportunity/affirmative action employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veteran status, or any characteristic protected by law.

FOR US BASED CANDIDATES ONLY

Jazz Pharmaceuticals, Inc. is committed to fair and equitable compensation practices and we strive to provide employees with total compensation packages that are market competitive. For this role, the full and complete base pay range is: $134,400.00 - $201,600.00

Individual compensation paid within this range will depend on many factors, including qualifications, skills, relevant experience, job knowledge, and other pertinent factors. The goal is to ensure fair and competitive compensation aligned with the candidate's expertise and contributions, within the established pay framework and our Total Compensation philosophy. Internal equity considerations will also influence individual base pay decisions. This range will be reviewed on a regular basis.

At Jazz, your base pay is only one part of your total compensation package. The successful candidate may also be eligible for a discretionary annual cash bonus or incentive compensation (depending on the role), in accordance with the terms of the Company's Global Cash Bonus Plan or Incentive Compensation Plan, as well as discretionary equity grants in accordance with Jazz's Long Term Equity Incentive Plan.

The successful candidate will also be eligible to participate in various benefits offerings, including, but not limited to, medical, dental and vision insurance, 401k retirement savings plan, and flexible paid vacation. For more information on our Benefits offerings please click here: https://careers.jazzpharma.com/benefits.html.