Experteer Overview In this role, you will lead the enterprise-wide cybersecurity and privacy risk management framework, operating in a global SAFe setting. You’ll translate risk data into actionable insights for risk owners and executives to guide governance and investment decisions. You’ll drive risk assessments, governance reporting, and risk strategies while collaborating withSecurity, Privacy, Legal, Quality u0026amp; Regulatory, and business units. This is an opportunity to shape risk posture in a healthcare-focused, regulated environment and contribute to Roche’s mission of accessible healthcare.Compensaciones / Beneficios
- Drive integral risk assessments across operations and product groups, identifying cybersecurity, privacy, and regulatory exposures.
- Develop executive and governance reports and dashboards for risk owners and senior management.
- Define and monitor risk tolerance aligned with business goals and regulatory mandates (GDPR, HIPAA, ISO).




- Provide remediation guidance and risk treatment strategies with a focus on ROI.
- Collaborate with Security, Privacy, Legal, Quality u0026 Regulatory, and Business units to embed security- and privacy-by-design principles.Responsabilidades
- 6+ years in cybersecurity, privacy risk management, compliance, or information security governance in large multinational settings.
- Bachelor’s degree in Computer Science, Information Security, Business Information Systems, or related field; Master’s preferred.
- Experience with SAFe and Agile frameworks; risk management across matrixed teams.
- Knowledge of GDPR, HIPAA, ISO 27001, NIST, CIS.
- Strong stakeholder communication with ability to influence decision-makers at operational and senior levels.
- Healthcare, medical diagnostics, pharmaceuticals, or regulated digital software background strongly preferred.Requisitos principales
-

📌 Cybersecurity & Privacy Risk And Compliance Manager (Barcelona)
🏢 Roche
📍 Barcelona