{"id":3990190,"url":"https://alion.io/job/astellas-data-security-program-lead","title":"Data Security Program Lead","company":{"id":703794,"name":"Astellas","domain":"astellas.com","url":"https://alion.io/company/astellas-2","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SuccessFactors","truth_index":null},"role":"Security","role_family":"Security","seniority":"lead","employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["Mexico City, Mexico"],"countries":["MX"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":10,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"GDPR","optional":false},{"name":"HIPAA","optional":false}],"status":"live","first_seen_at":"2026-11-09T23:09:26Z","employer_posted_date":"2026-11-09","last_verified_at":"2026-11-10T05:20:33Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":".\nAbout Astellas\nAstellas is a global life sciences company committed to turning innovative science into VALUE for patients. We provide transformative therapies in disease areas that include oncology, ophthalmology, urology, immunology and women's health. Through our research and development programs, we are pioneering new healthcare solutions for diseases with high unmet medical need. Learn more at Astellas.com.\nAre you driven to make a real difference in the lives of patients?\nWe're seeking passionate individuals who thrive in dynamic environments, embrace new ideas, and aren't afraid to take intelligent risks. People who act with unwavering integrity and are deeply committed to making a tangible impact.\nWorking Environment and Location\nThis position is based in Mexico City (Santa Fe area) and will require on-site work in a hybrid set up.\nAt Astellas we recognize the importance of work/life balance, and we are proud to offer a hybrid working solution allowing time to connect with colleagues at the office with the flexibility to also work from home. We believe this will optimize the most productive work environment for all employees to succeed and deliver. Hybrid work from certain locations may be permitted in accordance with Astellas’ Responsible Flexibility Guidelines.\nPurpose and Scope\nShape how a global pharmaceutical company protects its most sensitive information. As Data Security Program Lead, you will work with business leaders to identify the data that matters most, translate it into clear policy and protection requirements for our data security engineering team, and help employees around the world handle data safely as we roll out new labeling and data loss prevention controls across Microsoft 365, endpoints and AI tools\nRole and Responsibilities\n\nAstellas' enterprise data protection program across all business functions, including research, clinical, manufacturing and commercial data, covering Microsoft 365, endpoints, web and AI tools. Based in Mexico and supporting stakeholders globally, with a focus on the Americas.\n\nBusiness Engagement & Discovery: Lead workshops and interviews with data owners and business leaders to understand how each function creates, stores and shares sensitive information. Prepare focused, function-specific materials so sessions are efficient, and build lasting relationships with data owners and business partners.\n\nCrown Jewels & Use Cases: Maintain the register of Astellas' most sensitive data ('crown jewels') with Legal and data owners. Translate business needs into prioritized, documented protection use cases for the Data Security Engineering Lead - what data, which channels, what action and which users - and confirm results with the business before controls are enforced.\n\nPolicy & Procedures: Draft and maintain the policies, standards and SOPs for the data security program, including data classification and handling, sensitivity labeling, data loss prevention, exceptions and the use of data in AI tools. Keep them aligned with regulations such as GDPR, HIPAA, Japan's APPI and GxP, and publish them through Astellas' controlled document process.\n\nContinue:Role and Responsibilities\n\nExceptions: Review and decide data protection exception requests through the established policy exception process, weighing business justification, compensating controls and expiry dates. Use exception trends to identify where policies, procedures or controls need to change.\n\nUser Education & Coaching: Design and deliver role-based training and communications for each control rollout, covering labeling, data loss warnings, safe sharing and responsible use of AI tools. Coach data owners and business partners, follow up with users and teams where data loss or insider risk trends show repeated risky behavior, and build a network of data protection champions across functions and regions.\n\nAdoption & Reporting: Track adoption, user overrides and feedback, and review trends regularly with the Insider Risk team; use these insights to target user engagement and to give the engineering team clear tuning priorities; and report program progress to leadership.\n\nProgram Leadership: Own the data protection policy and adoption roadmap; represent the program at steering committee and governance forums; oversee our implementation partner's delivery of policy, workshop and adoption work; and mentor team members and data protection champions.\n\nEssential Qualifications\n\nBachelor's degree in Information Systems, Cybersecurity, Business or a related field.\n\n10+ years in information security, data protection or data governance, including 5+ years leading a data classification, information protection or data loss prevention program in a global organization.\n\nExperience leading cross-functional initiatives with global stakeholders and overseeing external partners or vendors, including leading or mentoring a team.\n\nProven experience writing and maintaining policies, standards and SOPs, preferably in a regulated industry.\n\nExperience leading workshops with business stakeholders and translating business needs into clear requirements.\n\nExperience designing and delivering security awareness, training or change programs.\n\nExcellent written and spoken English, with the ability to explain data protection in plain language to non-technical audiences.\n\nPreferred Qualifications\n\nExperience in pharmaceutical, life sciences or other regulated industries, including GxP and clinical data.\n\nWorking familiarity with Microsoft Purview concepts (sensitivity labels, data loss prevention) or comparable tools.\n\nKnowledge of privacy and data protection regulations such as GDPR, HIPAA and Japan's APPI.\n\nEnglish language skills.\n\nCertifications such as CIPP, CIPM, CDPSE, CISM or CISSP.\n\nBenefits\nCareers | Astellas\nWhy Astellas\nGlobal collaboration: Become part of a connected global business of like-minded life science leaders, all dedicated to improving patients' lives worldwide. \nReal-world patient impact: Contribute to transformative therapies that reach patients around the world, knowing your work makes a difference every day.\nRelentless Innovation: Join a company at the forefront of scientific breakthroughs, where you'll have the opportunity to shape the future of healthcare.\nA Culture of Growth: Chart your own course within a supportive environment that values your contributions, champions your development, and empowers you to pursue your passions.\nOur Organizational Values and Behaviors\nValues:Integrity, Innovation and Impactsit at the heart of what we do.\nBehaviors: We come together as ‘One Astellas’, working with courage and a sense of urgency. We are outcome focused and consistently take accountability for our personal contribution.\nOur Organisational Values and Behaviours\nIntegrity\nInnovation\nImpact\nOne Astellas\nAccountability\nCourage\nSense of Urgency\nOutcome Focus\nSkills and Capabilities\nOrganizational Focus","description_format":"text","description_chars":6917,"description_truncated":false,"requirements":{"experience_years_min":10,"management_years_min":5,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[{"language":"English","level":"All levels","optional":false}]},"benefits":["Hybrid work"],"hiring_locations":[{"name":"Mexico","iso":"MX","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Biotechnology","Prescription Drugs"],"lifecycle":[{"event":"open","at":"2026-11-09T23:09:26Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":0,"expected_fill_days":19,"reasons":["conf:1","velocity","win:early"],"computed_at":"2026-11-10T06:52:35Z"},"pay":null,"html_url":"https://alion.io/job/astellas-data-security-program-lead","json_url":"https://alion.io/job/astellas-data-security-program-lead.json","meta":{"generated_at":"2026-11-10T07:10:40Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":16666,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-11T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":703794},"rest":"https://alion.io/mcp/rest/get_company?id=703794"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fastellas-data-security-program-lead"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fastellas-data-security-program-lead"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fastellas-data-security-program-lead"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/astellas-data-security-program-lead\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fastellas-data-security-program-lead"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3990190}},{"tool":"search_jobs","arguments":{"company":"astellas.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3990190},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}