AstraZeneca
Healthcare
Director,CyberSecurityAccessGovernance&Compliance
Neural analysis suggests this role is
optimal for Director candidates.
“Director, Cyber Security Access Governance & Compliance at AstraZeneca. Skills: Access Governance, Compliance, Cyber Security, Identity Management. Direct Access Governance & Compliance program. Align initiatives to business objectives”
What You'll Achieve.
Reduce access risk; Elevate stewardship; Produce audit-ready evidence; Uplift entitlement quality; Reduce manual effort; Accelerate remediation; Improve governance outcomes; Ensure timely remediation; Sustain control health; Sustain governance outcomes; Increase accountability; Speed remediation
Industry & Context.
Risk prioritization; Compensating controls; Defensible outcomes; Root cause analysis
What They're Looking For.
Must Have
15+ years cyber security strategies, 15+ years access governance, 15+ years control efficiency, 15+ years audit-ready evidence, Develop long-term strategic plans, Reduce cyber risk, Least-privilege governance, SoD management, Continuous control monitoring, Partner with operational teams, Drive timely remediation, Sustain control health, Work with cyber threat vectors, Work with charge methodologies, Work with mitigation techniques, Lead large-scale cyber security systems, Lead large-scale cyber security projects, Lead large-scale cyber security processes, Work within quality compliance environment, Apply policies and procedures, Meet audit expectations, Meet regulatory expectations, Co-work with global leadership, Influence application owners, Influence service owners, Remediate risk, Sustain governance outcomes
Nice to Have
Relevant security certifications, Governance/risk domain certifications, Security management certifications, Audit/risk certifications, IAM/IGA platform certifications
What You'll Do.
Direct Access Governance & Compliance program
Align initiatives to business objectives
Align initiatives to industry guidelines
Ensure least-privilege governance
Ensure audit-ready outcomes
Expand Sail Point certification automation
Uplift entitlement quality
Improve systematic application onboarding
Improve control design
Define access governance policies
Define certification standards
Define evidence requirements
Define retention requirements
Define Sod/toxic combination controls
Define time-boxed exception management
Provide executive mentorship
Design governance health dashboards
Design exception registers
Design automated evidence outputs
Enable real-time control transparency
Enable efficient audit support
Establish access risk management framework
Establish security metrics program
Chair access governance steering groups
Partner with application owners
Partner with HR/vendor management
Partner with internal audit
Partner with compliance teams
Partner with infrastructure/platform teams
Drive timely remediation
Direct comprehensive governance assessments
Direct comprehensive governance testing
Review certification quality
Perform manual attestations
Perform reconciliations
Own stewardship health
Define data quality standards
Supervise key attributes
Set multi-quarter plan
Develop practitioners
Build certification design capabilities
Build certification QA capabilities
Build control testing capabilities
Build data stewardship capabilities
Build analytics capabilities
Deliver capacity plans
Supervise capacity plans
Supervise investments
Support reporting/analytics enablement
Support continuous improvement
Lead multi-regional initiatives
Drive large-scale change
Produce executive-ready dashboards
Produce tier reporting
Increase accountability
How You'll Work.
Team & Collaboration
Application owners; HR/vendor management; Internal audit; Compliance teams; Infrastructure/platform teams; Service owners; Global leadership
Communication Scope
Executive presentations; Reporting
Process & Methodology
Strategic planning, Program management
Full Job Description
## **Director, Cyber Security Access Governance & Compliance** **GCL: F** **Introduction to role:** Are you ready to define how a global enterprise governs access at scale and turn control assurance into a competitive advantage? In this role, you will build the strategy and execution of identity and access governance that safeguards our science, data, and platforms, so we can deliver life‑changing medicines to patients faster and with confidence. You will lead a high-impact program that reduces access risk, elevates stewardship, and produces audit‑ready evidence across workforce, privileged, and external access. Working with brand-new platforms including Sail Point Identity Security Cloud and analytics, you will expand automation, raise certification quality, and accelerate remediation. ## ## Accountabilities: * Direct the end‑to‑end Access Governance & Compliance program, aligning initiatives to business objectives and industry guidelines while ensuring least‑privilege governance and audit‑ready outcomes. * Expand Sail Point Identity Security Cloud certification automation, uplift entitlement quality, and reduce manual effort through systematic application onboarding and control design improvements. * Define and implement access governance policies, certification standards (scope, cadence, critical issue), evidence and retention requirements, Sod/toxic combination controls, and time‑boxed exception management. * Provide executive‑level mentorship on cyber risk, regulatory compliance, and data privacy as they relate to identity and access, including risk‑based prioritization, compensating controls, and defensible outcomes. * Design and implement governance health dashboards, exception registers, and automated evidence outputs to enable real‑time control transparency and efficient audit support. * Establish an access risk management framework and security metrics program with clear control objectives, benchmark targets, tier reporting, and recurring governance rhythm
Applying for this Director, Cyber Security Access Governance & Compliance role?
Most applicants get filtered before a human reads their resume. See if yours makes the cut.
How to Apply on Workday
- Workday has a multi-step form — save your progress after every section.
- "Apply With LinkedIn" can fail or lose data; manual entry is more reliable.
- Watch for the "Submit for Review" final step — hitting "Save" alone does not submit.
- Job requisition numbers are useful when following up with HR by email.
ANONYMOUS · UNFILTERED
What do employees actually say about AstraZeneca?
Real rants from real employees. Read before you apply.