Senior Associate, Cyber Resilience
Pfizer
Senior Associate, Cyber Resilience
Job Description
ROLE SUMMARYOur Global Governance, Risk, and Compliance team provides comprehensive blueprints for cybersecurity excellence by embedding governance, risk management, and compliance into every layer. The team is responsible for ensuring risk-based decision-making is used and that security, privacy, and regulatory compliance is integrated seamlessly with Pfizer’s organization.We are seeking an experienced Senior Associate, Resilience to support the development and execution of our cyber resilience and operational preparedness capabilities. This role will play a key part in helping ensure Pfizer can anticipate, withstand, respond to, and recover from cyber disruptions, technology failures, third‑party incidents, and operational crises—while maintaining GxP compliance, patient safety, data integrity, and regulatory continuity. ROLE RESPONSIBILITIESSupport the development and maintenance of cyber resilience frameworks, playbooks, and procedures aligned to business continuity, disaster recovery, and incident response.Contribute to cyber incident simulations, tabletop exercises, and recovery testing to validate organizational readiness.Assist in identifying and prioritizing critical business services, systems, and dependencies to inform resilience planning.Collaborate with GRC, Digital, Manufacturing, R&D, and Business stakeholders to assess cyber resilience risks and control gaps.Support alignment to industry frameworks and regulatory expectations (e.g., NIST CSF, GxP considerations).Document evidence and artifacts required for audits, assessments, and regulatory inquiries.Track remediation actions and resilience enhancements across technology, process, and third‑party dependencies.Analyze incidents and disruption events to identify lessons learned and improvement opportunities.Support metrics, reporting, and dashboards to communicate resilience posture to leadership. BASIC QUALIFICATIONSBachelor’s degree required in cybersecurity, information systems, risk management, or related discipline preferred.3+ years of experience in information security, risk, compliance, information protection, or related disciplinesFoundational knowledge of cybersecurity concepts, incident response, and risk management.Experience working in regulated industries (pharma, life sciences, healthcare, or manufacturing strongly preferred).Strong analytical, documentation, and stakeholder communication skills. PREFERRED QUALIFICATIONSRelevant certifications such as CISSP, CISM, CRISC, CISA, PMP, or other governance/risk credentials.Familiarity with frameworks such as NIST CSF, NIST SP 800‑53, ISO 22301, or ISO 27001.Exposure to GxP, validated systems, manufacturing environments, or OT/ICS risks.Experience supporting cyber exercises, scenario testing, or recovery planning. Work Location Assignment: HybridPlease apply by sending your CV and a motivational letter in EnglishPurpose Breakthroughs that change patients' lives... At Pfizer we are a patient centric company, guided by our four values: courage, joy, equity and excellence. Our breakthrough culture lends itself to our dedication to transforming millions of lives. Digital Transformation Strategy One bold way we are achieving our purpose is through our company wide digital transformation strategy. We are leading the way in adopting new data, modelling and automated solutions to further digitize and accelerate drug discovery and development with the aim of enhancing health outcomes and the patient experience.Flexibility We aim to create a trusting, flexible workplace culture which encourages employees to achieve work life harmony, attracts talent and enables everyone to be their best working self. Let’s start the conversation! Equal Employment Opportunity We believe that a diverse and inclusive workforce is crucial to building a successful business. As an employer, Pfizer is committed to celebrating this, in all its forms – allowing for us to be as diverse as the patients and communities we serve. Together, we continue to build a culture that encourages, supports and empowers our employees.Disability InclusionOur mission is unleashing the power of all our people and we are proud to be a disability inclusive employer, ensuring equal employment opportunities for all candidates. We encourage you to put your best self forward with the knowledge and trust that we will make any reasonable adjustments to support your application and future career. Your journey with Pfizer starts here!
Pfizer endeavors to make www.pfizer.com/careers accessible to all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process and/or interviewing, please email disabilityrecruitment@pfizer.com. This is to be used solely for accommodation requests with respect to the accessibility of our website, online application process and/or interviewing. Requests for any other reason will not be returned.
To learn more about acceptable and prohibited uses of AI during the recruitment process, please review our candidate AI-use guidelines available on Pfizer Careers.
Information & Business Tech
Locations
- Greece-Thessaloniki Chortiatis
Skills Required
- information securityintermediate
- cybersecurity conceptsintermediate
- frameworks such as NIST CSFintermediate
Required Qualifications
- Bachelor’s degree required in cybersecurity, information systems, risk management, or related discipline preferred. (degree in cybersecurity)
- Bachelor’s degree required in cybersecurity, information systems, risk management, or related discipline preferred. (degree in cybersecurity)
- 3+ years of experience in information security, risk, compliance, information protection, or related disciplines (experience, 3 years)
- 3+ years of experience in information security, risk, compliance, information protection, or related disciplines (experience, 3 years)
- Foundational knowledge of cybersecurity concepts, incident response, and risk management. (experience)
- Experience working in regulated industries (pharma, life sciences, healthcare, or manufacturing strongly preferred). (experience)
- Strong analytical, documentation, and stakeholder communication skills. (experience)
- Foundational knowledge of cybersecurity concepts, incident response, and risk management. (experience)
- Experience working in regulated industries (pharma, life sciences, healthcare, or manufacturing strongly preferred). (experience)
- Strong analytical, documentation, and stakeholder communication skills. (experience)
Preferred Qualifications
- Relevant certifications such as CISSP, CISM, CRISC, CISA, PMP, or other governance/risk credentials. (certification)
- Familiarity with frameworks such as NIST CSF, NIST SP 800‑53, ISO 22301, or ISO 27001. (experience)
- Exposure to GxP, validated systems, manufacturing environments, or OT/ICS risks. (experience)
- Experience supporting cyber exercises, scenario testing, or recovery planning. (experience)
- Relevant certifications such as CISSP, CISM, CRISC, CISA, PMP, or other governance/risk credentials. (certification)
- Familiarity with frameworks such as NIST CSF, NIST SP 800‑53, ISO 22301, or ISO 27001. (experience)
- Exposure to GxP, validated systems, manufacturing environments, or OT/ICS risks. (experience)
- Experience supporting cyber exercises, scenario testing, or recovery planning. (experience)
- Work Location Assignment: Hybrid (experience)
- Please apply by sending your CV and a motivational letter in English (experience)
- Breakthroughs that change patients' lives... At Pfizer we are a patient centric company, guided by our four values: courage, joy, equity and excellence. Our breakthrough culture lends itself to our dedication to transforming millions of lives. (experience)
- Digital Transformation Strategy (experience)
- One bold way we are achieving our purpose is through our company wide digital transformation strategy. We are leading the way in adopting new data, modelling and automated solutions to further digitize and accelerate drug discovery and development with the aim of enhancing health outcomes and the patient experience. (experience)
- We aim to create a trusting, flexible workplace culture which encourages employees to achieve work life harmony, attracts talent and enables everyone to be their best working self. Let’s start the conversation! (experience)
- Equal Employment Opportunity (experience)
- We believe that a diverse and inclusive workforce is crucial to building a successful business. As an employer, Pfizer is committed to celebrating this, in all its forms – allowing for us to be as diverse as the patients and communities we serve. Together, we continue to build a culture that encourages, supports and empowers our employees. (experience)
- To learn more about acceptable and prohibited uses of AI during the recruitment process, please review our candidate AI-use guidelines available on Pfizer Careers. (experience)
Responsibilities
- Support the development and maintenance of cyber resilience frameworks, playbooks, and procedures aligned to business continuity, disaster recovery, and incident response.
- Contribute to cyber incident simulations, tabletop exercises, and recovery testing to validate organizational readiness.
- Assist in identifying and prioritizing critical business services, systems, and dependencies to inform resilience planning.
- Collaborate with GRC, Digital, Manufacturing, R&D, and Business stakeholders to assess cyber resilience risks and control gaps.
- Support alignment to industry frameworks and regulatory expectations (e.g., NIST CSF, GxP considerations).
- Document evidence and artifacts required for audits, assessments, and regulatory inquiries.
- Track remediation actions and resilience enhancements across technology, process, and third‑party dependencies.
- Analyze incidents and disruption events to identify lessons learned and improvement opportunities.
- Support metrics, reporting, and dashboards to communicate resilience posture to leadership.
- Support the development and maintenance of cyber resilience frameworks, playbooks, and procedures aligned to business continuity, disaster recovery, and incident response.
- Contribute to cyber incident simulations, tabletop exercises, and recovery testing to validate organizational readiness.
- Assist in identifying and prioritizing critical business services, systems, and dependencies to inform resilience planning.
- Collaborate with GRC, Digital, Manufacturing, R&D, and Business stakeholders to assess cyber resilience risks and control gaps.
- Support alignment to industry frameworks and regulatory expectations (e.g., NIST CSF, GxP considerations).
- Document evidence and artifacts required for audits, assessments, and regulatory inquiries.
- Track remediation actions and resilience enhancements across technology, process, and third‑party dependencies.
- Analyze incidents and disruption events to identify lessons learned and improvement opportunities.
- Support metrics, reporting, and dashboards to communicate resilience posture to leadership.
Tags & Categories
Answer 10 quick questions to check your fit for Senior Associate, Cyber Resilience @ Pfizer.
10 Questions
~2 Minutes
Instant Score