PositionAs an Expert within the Information Security & Privacy Advisory (ISPA) team, you move beyond "checking boxes" to become a strategic partner for global Engineering hubs. You will lead high‑impact security and privacy risk assessments, ensuring Roche’s most ambitious digital projects—from GenAI to cloud‑native platforms—are resilient, "Secure by Design," and compliant with global regulations.

Key Responsibilities

- Lead Security Expert Reviews (SER) for complex architectures, performing deep‑dive technical and privacy evaluations to identify and mitigate residual risks.
- Bridge the gap between IT, Legal, and Data Protection Officers to translate complex legal mandates (GDPR, CCPA, etc.) into actionable technical and organizational controls.
- Contribute to Security Design Patterns and Technical Baselines for emerging technologies such as Generative AI and Cloud‑native ecosystems.
- Utilize ServiceNow IRM to ensure the integrity and traceability of security advisory, delivering data‑driven, consistent, and audit‑ready results.




- Foster a "Four‑Eye" quality culture through peer reviews and collective knowledge exchange within a global team of experts.

Qualifications

- 5–10 years in Information Security/GRC with a proven track record in Information Risk Assessments and DPIAs in complex, global environments.
- Deep understanding of Security Architecture and the ability to translate "Legal‑speak" into "Engineering‑speak."
- Expert knowledge of international privacy frameworks (GDPR, CCPA, HIPAA, etc.) and security standards (ISO 27001, NIST).
- Experienced in using ServiceNow IRM to execute and document risk assessments, ensuring consistent, high‑quality, transparent security guidance.
- Degree in Computer Science or Legal. Certifications like CISSP, CISM, CRISC, CIPP/E, CIPM or ISO 27001 Lead Auditor are highly valued.
- Exceptional stakeholder management skills with the ability to drive consensus across a integral organization.

Roche is an Equal Opportunity Employer. We believe it’s urgent to deliver medical solutions right now – even as we develop innovations for the future.

#J-18808-Ljbffr

📌 Information Security Governance Expert - Madrid, Comunidad de Madrid, Spain
🏢 F. Hoffmann-La Roche
📍 Madrid