Roche

Healthcare

InformationSecurityGovernanceExpert

Madrid, Spain FULL TIME
Market Sentiment
HIGH DEMAND

Neural analysis suggests this role is
optimal for Senior candidates.

The Brief

“Information Security Governance Expert at Roche. Skills: Information Security Governance, Risk Assessments, Privacy Frameworks. Lead Security Expert Reviews. Perform technical and privacy evaluations”

What You'll Achieve.

Ensure digital projects are resilient; Ensure digital projects are "Secure by Design"; Ensure digital projects are compliant with global regulations; Ensure Roche’s digital landscape is secure by design; Ensure Roche’s digital landscape is compliant with international standards; Ensure consistent, high-quality, and transparent security guidance

Industry & Context.

Healthcare
Problems you'll solve

Identify and mitigate residual risks

What They're Looking For.

Must Have

5–10 years in Information Security/GRC, Proven track record in Information Risk Assessments, Proven track record in DPIAs, Deep understanding of Security Architecture, Expert knowledge of international privacy frameworks (GDPR, CCPA, HIPAA, etc.), Expert knowledge of security standards (ISO 27001, NIST), Experienced in using ServiceNow IRM to execute and document risk assessments, Exceptional stakeholder management skills

Nice to Have

CISSP, CISM, CRISC, CIPP/E, CIPM, ISO27001 Lead Auditor

What You'll Do.

Lead Security Expert Reviews

Perform technical and privacy evaluations

Identify and mitigate residual risks

Bridge gap between IT

Data Protection Officers

Translate legal mandates into controls

Contribute to Security Design Patterns

Contribute to Technical Baselines

Ensure integrity and traceability of security advisory

Deliver data-driven results

Foster a "Four-Eye" quality culture

How You'll Work.

Team & Collaboration

Act as a strategic partner for global Engineering hubs; Serve as strategic bridge between IT, business, and legal functions; Provide expert guidance; Collective knowledge exchange within a global team; Drive consensus across a global organization

Communication Scope

Exceptional stakeholder management skills; Ability to drive consensus

Full Job Description

At Roche you can show up as yourself, embraced for the unique qualities you bring. Our culture encourages personal expression, open dialogue, and genuine connections, where you are valued, accepted and respected for who you are, allowing you to thrive both personally and professionally. This is how we aim to prevent, stop and cure diseases and ensure everyone has access to healthcare today and for generations to come. Join Roche, where every voice matters. ### ### The Position ## As an Expert within the Information Security & Privacy Advisory (ISPA) team, you move beyond "checking boxes" to become a strategic partner for global Engineering hubs. You will lead high-impact security and privacy risk assessments, ensuring Roche’s most ambitious digital projects—from GenAI to cloud-native platforms—are resilient, "Secure by Design," and compliant with global regulations. ****The Team**** The Information Security & Privacy Advisory (ISPA) team serves as the strategic bridge between IT, business, and legal functions at Roche. Our mission is to ensure that Roche’s digital landscape—from cutting-edge GenAI platforms to global enterprise solutions—is secure by design and compliant with international standards. We act as a global center of excellence that translates complex regulatory requirements into actionable security architecture, providing the expert guidance necessary to navigate a rapidly evolving global risk landscape. ## ## ****Key Responsibilities**** * High-Risk Advisory: Lead Security Expert Reviews (SER) for complex architectures, performing deep-dive technical and privacy evaluations to identify and mitigate residual risks. * Privacy: Bridge the gap between IT, Legal, and Data Protection Officers. Translate complex legal mandates (GDPR, CCPA etc.) into actionable technical and organizational controls. * Information Security: Contribute to Security Design Patterns and Technical Baselines for emerging technologies like Generative AI and Cloud-native ecosystems. *

Free ATS check

Applying for this Information Security Governance Expert role?

Most applicants get filtered before a human reads their resume. See if yours makes the cut.

How to Apply on Workday

  • Workday has a multi-step form — save your progress after every section.
  • "Apply With LinkedIn" can fail or lose data; manual entry is more reliable.
  • Watch for the "Submit for Review" final step — hitting "Save" alone does not submit.
  • Job requisition numbers are useful when following up with HR by email.

ANONYMOUS · UNFILTERED

What do employees actually say about Roche?

Real rants from real employees. Read before you apply.

Read Company Rants →