Manager, Cybersecurity – Information Protection

Pfizer

. Lead and oversee Pfizer's enterprise information protection program .

Posted 10/19/2026full-timeUnited StatesJuniorMid-Level💰 $106,000 - $176,600 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in cybersecurity governance, risk management, and compliance frameworks, with a strong focus on U.S. regulations such as CCPA/CPRA and HIPAA. Proven ability to lead information protection initiatives and collaborate effectively with diverse stakeholders across business and technology functions.

Highest-signal resume keywords

Cybersecurity GovernanceRisk ManagementData Protection ComplianceStakeholder ManagementGRC Platforms

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Cybersecurity AssessmentsData Loss PreventionData DiscoveryData ClassificationData EncryptionRegulatory ComplianceInformation Protection ControlsIncident ResponseProject LeadershipRegulatory Inspections

Soft Skills

Communication SkillsInfluencing SkillsProject CoordinationCollaboration

Tools & Technologies

GRC PlatformsDLP SolutionsData Tagging SolutionsData Labeling Solutions

Certifications & Qualifications

CISSPCISACISMCRISCCIPP/ECIPM

Industry Keywords

PharmaceuticalHealthcareLife SciencesCyber PrivacyCompliance Frameworks

Tech Stack

Tools & technologies

Cyber Security

About the role

Key responsibilities & impact

Lead and oversee Pfizer's enterprise information protection program
Serve as the primary Technology and Cyber Privacy Advisor within the Cyber GRC organization
Advise on cybersecurity, information protection, and data privacy matters across the United States
Partner with Business, Digital & Technology, Privacy, Legal, and Compliance stakeholders on strategic initiatives, business transformations, and technology projects
Assess and manage cybersecurity and information protection risks for business initiatives, applications, digital solutions, and third-party engagements
Ensure compliance with U.S. cybersecurity and data protection regulations, including CCPA/CPRA, HIPAA, VCDPA, CPA, and CTDPA
Support regulatory inspections, audits, compliance reviews, and regulatory engagements
Lead cybersecurity and data protection compliance programs, including regulatory assessments, filings, remediation planning, and related activities
Monitor emerging cybersecurity threats, regulatory developments, and compliance risks
Drive security awareness, risk management, and information protection initiatives
Define information protection controls and support development of data protection policies and standards
Deploy and support DLP, data discovery, data labeling, and data tagging solutions
Support cybersecurity incident response, escalation, and remediation activities
Collaborate with stakeholders across multiple time zones, including occasional coordination with Latin America-based teams
Travel as required by the business, less than 5% domestic and/or international

Requirements

What you’ll need

Bachelor's degree in Information Security, Computer Science, Information Systems, Risk Management, or a related field with 4+ years of relevant experience, including at least 2 years in a supervisory or project leadership capacity; OR master's degree with at least 2 years of experience; OR associate's degree with 8 years of experience; OR high school diploma (or equivalent) and 10 years of relevant experience
Strong knowledge of cybersecurity governance, risk management, compliance frameworks, and applicable regulatory requirements
Strong understanding of cybersecurity and data protection regulations, including CCPA/CPRA, HIPAA, and U.S. state and federal requirements
Experience supporting cybersecurity assessments, audits, regulatory inspections, compliance programs, or risk management initiatives
Strong hands-on familiarity with technologies for data discovery, classification, and data loss prevention programs
Working knowledge of data encryption concepts and approaches across different environments
Strong stakeholder management, communication, and influencing skills across business and technology functions
Strong project coordination across business and technical teams
Professional proficiency in English; Spanish or Portuguese is a plus
Ability to work through a personal laptop computer or mobile device for extended periods
Professional certifications such as CISSP, CISA, CISM, CRISC, CIPP/E, CIPM, or equivalent are preferred
Experience in pharmaceutical, healthcare, or life sciences industry is strongly preferred
Hands-on experience with GRC platforms such as Archer
Familiarity with privacy, intellectual property protection, and regulated data environments
Must be authorized to be employed in the U.S. by any employer
Permanent work authorization in the United States required; U.S. work visa sponsorship is not available now or in the future

Benefits

Comp & perks

Global Performance Plan bonus target of 15.0% of base salary
Share-based long-term incentive program eligibility
401(k) plan with Pfizer Matching Contributions
Additional Pfizer Retirement Savings Contribution
Paid vacation, holiday, and personal days
Paid caregiver/parental and medical leave
Medical, prescription drug, dental, and vision coverage
Relocation assistance may be available based on business needs and/or eligibility