Expert
- Information Security & Privacy Governance At Roche you can show up as yourself, embraced for the unique qualities you bring. As an Expert within Information Security & Privacy Advisory (ISPA), you move beyond "checking boxes" to become a high-impact partner for System Owners and global Engineering hubs. The ISPA team serves as the strategic bridge between IT, business, and legal functions at Roche. You will lead critical security and privacy risk assessments to operationalize "Security and Privacy-by-Design" principles, ensuring complex digital initiatives, from AI platforms to enterprise systems, remain resilient, secure, and compliant. Risk Control & Mitigation: Negotiate risk-mitigating control objectives with business and technical stakeholders; Technical Baselines: Collaborate on Security Design Patterns and Technical Baselines for emerging technologies, including Generative AI, Cloud-native security, and advanced data platforms. Data Privacy Partnership: Bridge IT, Legal, and Data Protection Officers (DPOs) to translate global legal requirements into technical and organizational controls. ISMS Guidance: Advise business and IT owners on navigating Roche's Information Security Management System (ISMS) framework and external legal mandates. R&D;, Commercial, P&C;) across general and local operational realities. Agile Governance & Continuous Excellence ServiceNow) to manage advisory queues with audit-ready consistency. Maintain high standards through a "Four-Eye" peer review culture and shared knowledge exchange across global team members. Process Innovation:



Lead initiatives to streamline risk assessment workflows, identifying opportunities for automation and AI efficiencies. 10+ years in IT security, Governance, Risk, and Compliance (GRC) within complex, global environments. ~ Proven track record conducting Information Risk Assessments, Data Protection Impact Assessments (DPIA), and Cross-Border Data Transfer reviews. ~ Demonstrated experience providing pragmatic, business-aligned security advice on high-value, strategic projects across matrixed organizations. Cloud & AI Security: Practical insight into cloud platforms (AWS, GCP, Azure), AI orchestration layers, and Security/Privacy‐by‐Design principles. Ability to translate complex legal and policy mandates into clear engineering requirements. ServiceNow IRM) for workload tracking is a plus. Academic: Degree in Computer Science, Law, Information Technology, or equivalent practical experience. Ability to build consensus across business, legal, and engineering teams by translating technical risks into clear business impact. balances high-quality, audit‐scrutinized advisory with speed of delivery. Together, more than 100'000 employees across the globe are dedicated to advance science, ensuring everyone has access to healthcare today and for generations to come. Our efforts result in more than 26 million people treated with our medicines and over 30 billion tests conducted using our Diagnostics products. We empower each other to explore new possibilities, foster creativity, and keep our ambitions high, so we can deliver life‐changing healthcare solutions that make a global impact.

📌 Ot Automation Cybersecurity Specialist (Comunidad de Madrid)
🏢 VERBUND Green Power Iberia
📍 Comunidad de Madrid