Manager, Cybersecurity & Information Protection (US)

Role: Manager, Information Protection & Technology Privacy within Pfizer’s Cybersecurity GRC team, leading enterprise data protection efforts and serving as the primary privacy advisor. Responsibilities: oversee cybersecurity and data privacy compliance across the U.S., partner with legal, IT, security, and data protection teams to operationalize controls, manage risks related to sensitive data (IP, regulated data, confidential information), and support compliance with laws like CCPA/CPRA, HIPAA, and other state/federal regulations. Lead regulatory assessments, incident response, and security awareness initiatives, with a focus on data discovery, classification, and DLP tools. Qualifications: Bachelor's degree in Information Security, Computer Science, or related field with 4+ years' experience in cybersecurity, data protection, or regulatory compliance; or advanced degrees with relevant experience. Knowledge of cybersecurity frameworks, U.S. and Latin American privacy laws, and experience supporting audits or assessments. Preferred: professional certifications (e.g., CISSP, CISA), hands-on experience with GRC platforms, and pharmaceutical or healthcare industry background. High-value: focus on privacy, data protection, regulatory compliance, and risk management in a regulated pharma environment. Work setup: on-site 2-3 days/week in the U.S., with travel less than 5%. This role involves cross-functional collaboration and ongoing regulatory engagement.