Director, Application Cloud Security

At the heart of Pfizer's Digital transformation sits Global Cloud Services, enabling modern cloud infrastructure and engineering capabilities that influence business outcomes and provide value to our business, shareholders, and patients every day.

We are seeking an experienced Director of Application Cloud Security, providing strategic and technical leadership for the design, implementation, and continuous improvement of enterprise application cloud security capabilities across the digital organization. This role is responsible for ensuring that the software, APIs, and digital products developed and operated across the enterprise are secure by design, resilient, and aligned with business and regulatory requirements within a highly regulated pharmaceutical environment. The Director partners closely with Digital, and governance teams to embed security throughout the software development lifecycle and enable secure innovation at scale.

description

• Lead the application cloud security function, defining strategy, priorities, and roadmaps for securing software, APIs, and digital products across cloud, web, mobile, and enterprise application domains.
• Design and maintain scalable application cloud security programs and secure development practices that support digital products, platforms, and global business operations while meeting regulatory and compliance obligations.
• Oversee the selection, deployment, and lifecycle management of application cloud security tooling (e.g., SAST, DAST, SCA, and API security), ensuring controls are effective, resilient, and consistently applied across the SDLC.
• Partner with Digital, Cloud Services, and Cyber Defense leadership to integrate security into product development, CI/CD pipelines, and modernization initiatives.
• Establish secure coding standards, reference architectures, and guardrails aligned to enterprise risk management and application cloud security frameworks (e.g., OWASP, NIST SSDF).
• Lead and develop high performing application cloud security teams, fostering strong technical depth, accountability, and continuous improvement.
• Provide executive level reporting and risk insights to Cyber Defense leadership on application risk posture, vulnerability trends, and remediation priorities.

BASIC QUALIFICATIONS

• Bachelor’s degree in Cloud Security, Cybersecurity, Computer Science, Information Systems, or related field
• 10+ years of progressive experience in cybersecurity and application cloud security, including building and leadership of enterprise scale application security programs and teams.
• 5+ years of leadership experience managing security teams or programs
• Demonstrated experience designing and operating application cloud security controls across cloud, web, mobile, API, and DevSecOps domains.
• Proven ability to translate application cloud security risk into clear technical and business outcomes for senior leadership.
• Strong background in governance, risk management, and compliance frameworks (ISO 27001, NIST, FDA regulations, GxP)

PREFERRED QUALIFICATIONS

• Professional certifications: CISSP, CCNP, GIAC, or similar
• Familiarity with application cloud security frameworks and standards (e.g., OWASP ASVS/SAMM, NIST SSDF, Zero Trust architectures).
• Excellent strategic thinking
• Deeply analytical and credible
• Ability to challenge, influence, and support senior leadership
• Excellent communication and presentation skills
• Ability to bring structure to vaguely defined problems and solve them with creative yet pragmatic approaches
• Resourceful, self-motivated, and proactive – strong drive for excellence