Pfizer
Director,CyberGovernanceRiskandComplianceACDDealLead
Neural analysis suggests this role is
optimal for Director candidates.
“Director, Cyber Governance Risk and Compliance ACD Deal Lead at Pfizer. Skills: Cyber Governance, Risk Management, Compliance, M&A Cybersecurity. Serve as cybersecurity and technology risk advisor. Embed security-by-design principles”
What You'll Achieve.
Ensure security risk identification; Ensure regulatory alignment; Ensure secure integration; Enable business agility; Enable business growth; Meet IT general controls; Meet cybersecurity standards; Meet regulatory requirements; Mitigate risks; Accept risks; Escalate risks; Drive targeted remediation; Drive continuous improvement; Simplify risk processes; Simplify compliance processes; Improve standardization; Improve reuse of patterns; Improve reuse of playbooks; Enable execution excellence; Enable operational rigor; Improve ACD operating models; Improve ACD playbooks
Industry & Context.
Risk identification; Risk assessment; Risk mitigation; Risk escalation; Control assurance; Remediation execution; Root cause analysis
Extensive computer use, Flexible working hours, 10-15% travel, Support unexpected site inspections, Permanent work authorization in the United States
What They're Looking For.
Must Have
Bachelor's degree in Cybersecurity, Computer Science, Information Systems, or related field, 8+ years of progressive experience in cybersecurity, governance, risk management, or compliance roles, 5+ years of experience in a M&A setting supporting cybersecurity governance, policy, or risk management programs at scale, Experience in a highly matrixed organization, Excellent Communication skills, Experience implementing controls aligned to principles and concepts of regulatory compliance, Experience with pharmaceutical regulations, Excellent in-depth understanding and working experience with compliance guidelines and regulations such as SOX, FDA GxP regulations, and Domestic/International privacy laws (i. e. PCI DSS, MA201, Safe Harbor, etc.), Excellent stakeholder management skills, Organizational skills, Ability to work independently, Manage multiple priorities
Nice to Have
CISSP, CISM, CRISC or similar, Excellent strategic thinking, Deeply analytical and credible, Fact-based decision-making, Ability to influence and collaborate with peers, Develop and coach others, Oversee and guide the work of other colleagues
What You'll Do.
Serve as cybersecurity and technology risk advisor
Embed security-by-design principles
Embed compliant-by-design principles
Translate cybersecurity strategy into guidance
Identify information security risks
Assess information security risks
Manage information security risks
Provide independent risk insight
Provide control assurance
Support audit readiness
Support regulatory inspections
Support remediation execution
Monitor control effectiveness
Drive targeted remediation
Drive continuous improvement
Promote a culture of security
Promote a culture of accountability
Promote a culture of risk ownership
Simplify risk processes
Simplify compliance processes
Enable secure delivery at speed
Improve standardization
Improve reuse of patterns
Improve reuse of playbooks
Support delivery of CISO Infrastructure & Cloud services
Provide backup coverage
Shape secure solutions
Shape scalable solutions
Translate transaction requirements into patterns
Enable execution excellence
Enable operational rigor
Manage risks across teams
Manage dependencies across teams
Manage issues across teams
Improve ACD operating models
Improve ACD playbooks
Support financial governance
Support vendor governance
Support resource governance
How You'll Work.
Team & Collaboration
Partner with global stakeholders; Partner with Digital; Partner with Legal; Partner with Privacy; Partner with Finance; Partner with Digital ACD PMO; Partner with CISO; Partner with Audit teams; Cross-functional teams; Matrixed teams
Communication Scope
Succinctly defining problems; Delivering options
Process & Methodology
Transaction lifecycle management, Deal execution
Full Job Description
**ROLE SUMMARY** Our Global Cybersecurity Governance, Risk, and Compliance (GRC) team defines the blueprint for cybersecurity excellence by embedding governance, risk management, and compliance into every layer of the organization. The team enables consistent, risk‑based decision‑making and ensures that security, privacy, and regulatory requirements are seamlessly integrated across Pfizer’s global operations. We are seeking an experienced Director to serve in a strategic leadership role within the Security GRC organization, acting as the primary security representative for mergers, acquisitions, and divestitures. This role is accountable for ensuring security risk identification, regulatory alignment, and secure integration across the full transaction lifecycle—from diligence through post‑close execution—while enabling business agility and growth. The Director will partner closely with global stakeholders, including Digital, Legal, Privacy, Finance, and the Digital ACD PMO, to ensure M&A Digital and Technology services are forecasted, planned, designed, deployed, operated, and supported in a manner that meets IT general controls, cybersecurity standards, and regulatory requirements. **** **ROLE RESPONSIBILITIES** * Serve as a cybersecurity and technology risk advisor to Digital & Technology and business integration stakeholders, enabling informed decisions aligned to enterprise risk appetite and regulatory expectations * Embed security-by-design and compliant-by-design principles into the ACD operating model across strategy, solution delivery, operations, and lifecycle management * Translate cybersecurity strategy, policies, and control requirements into practical, business-aligned guidance that supports agile and product-centric delivery * Identify, assess, and manage information security and technology risks with Digital & Technology leaders, ensuring risks are mitigated, accepted, or escalated with clear ownership * Provide independent risk insight, control assur
Applying for this Director, Cyber Governance Risk and Compliance ACD Deal Lead role?
Most applicants get filtered before a human reads their resume. See if yours makes the cut.
How to Apply on Workday
- Workday has a multi-step form — save your progress after every section.
- "Apply With LinkedIn" can fail or lose data; manual entry is more reliable.
- Watch for the "Submit for Review" final step — hitting "Save" alone does not submit.
- Job requisition numbers are useful when following up with HR by email.
ANONYMOUS · UNFILTERED
What do employees actually say about Pfizer?
Real rants from real employees. Read before you apply.