{"id":1922799,"url":"https://alion.io/job/roche-expert-information-security-privacy-governance","title":"Expert - Information Security & Privacy Governance","company":{"id":13531,"name":"Roche","domain":"roche.com","url":"https://alion.io/company/roche","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":88,"open_postings":181,"ghost_share":0,"stale_share":0.674,"repost_share":0.022,"time_to_fill_p50_days":19,"computed_at":"2026-10-26T05:57:25Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Madrid, Spain"],"countries":["ES"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":51000,"max_usd":117000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":2372},"experience_years_min":10,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Agile","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"GCP","optional":false},{"name":"GDPR","optional":false},{"name":"ISO 27001","optional":false},{"name":"ServiceNow","optional":false}],"status":"live","first_seen_at":"2026-10-05T18:43:48Z","employer_posted_date":"2026-10-05","last_verified_at":"2026-10-24T23:50:01Z","board_verified":true,"closed_at":null,"days_open":21,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":21},"description":"At Roche you can show up as yourself, embraced for the unique qualities you bring. Our culture encourages personal expression, open dialogue, and genuine connections, where you are valued, accepted and respected for who you are, allowing you to thrive both personally and professionally. This is how we aim to prevent, stop and cure diseases and ensure everyone has access to healthcare today and for generations to come. Join Roche, where every voice matters.\nThe Position\nAs an Expert within Information Security & Privacy Advisory (ISPA), you move beyond \"checking boxes\" to become a high-impact partner for System Owners and global Engineering hubs. \nThe ISPA team serves as the strategic bridge between IT, business, and legal functions at Roche. You will lead critical security and privacy risk assessments to operationalize \"Security and Privacy-by-Design\" principles, ensuring complex digital initiatives, from AI platforms to enterprise systems, remain resilient, secure, and compliant.\nKey Responsibilities\n 1. Expert Advisory & Risk Mitigation \nHigh-Risk Reviews: Execute Security Expert Reviews (SER) for complex, high-risk system landscapes, performing deep-dive technical and privacy evaluations.\nRisk Control & Mitigation: Negotiate risk-mitigating control objectives with business and technical stakeholders; ensure clear risk ownership and accountability.\nTechnical Baselines: Collaborate on Security Design Patterns and Technical Baselines for emerging technologies, including Generative AI, Cloud-native security, and advanced data platforms.\n2. Strategic Liaison & Regulatory Governance \nData Privacy Partnership: Bridge IT, Legal, and Data Protection Officers (DPOs) to translate global legal requirements into technical and organizational controls.\nISMS Guidance: Advise business and IT owners on navigating Roche's Information Security Management System (ISMS) framework and external legal mandates.\nCross-Functional Support: Provide pragmatic guidance to strategic functions (e.g., R&D, Commercial, P&C) across global and local operational realities.\n3. Agile Governance & Continuous Excellence \nWorkflow Management: Utilize Integrated Risk Management (IRM) platforms (e.g., ServiceNow) to manage advisory queues with audit-ready consistency.\nPeer Assurance: Maintain high standards through a \"Four-Eye\" peer review culture and shared knowledge exchange across global team members.\nProcess Innovation: Lead initiatives to streamline risk assessment workflows, identifying opportunities for automation and AI efficiencies.\nQualifications\nExperience\n10+ years in IT security, Governance, Risk, and Compliance (GRC) within complex, global environments.\nProven track record conducting Information Risk Assessments, Data Protection Impact Assessments (DPIA), and Cross-Border Data Transfer reviews.\nDeep knowledge of international privacy frameworks (GDPR, CCPA/CPRA) and regulatory alignment (e.g., DoJ: 28 CFR Part 202).\nDemonstrated experience providing pragmatic, business-aligned security advice on high-value, strategic projects across matrixed organizations.\nTechnical & Architectural Skills\nSecurity Frameworks: Strong command of Information Security Management frameworks (e.g., ISO 27001, NIST).\nCloud & AI Security: Practical insight into cloud platforms (AWS, GCP, Azure), AI orchestration layers, and Security/Privacy-by-Design principles.\nTechnical Translation: Ability to translate complex legal and policy mandates into clear engineering requirements.\nWorkflow Tools: Experience with Integrated Risk Management (IRM) systems (e.g., ServiceNow IRM) for workload tracking is a plus.\nEducation & Certifications\nAcademic: Degree in Computer Science, Law, Information Technology, or equivalent practical experience.\nCertifications: Highly valued: CISSP, CISM, CRISC, AIGP, or ISO 27001 Lead Auditor. Significant plus: CIPP/E or CIPM.\nKey Competencies\nStrategic Influence: Ability to build consensus across business, legal, and engineering teams by translating technical risks into clear business impact.\nPragmatic Execution: Thrives in ambiguous, complex environments; balances high-quality, audit-scrutinized advisory with speed of delivery.\nWho we are\nA healthier future drives us to innovate. Together, more than 100’000 employees across the globe are dedicated to advance science, ensuring everyone has access to healthcare today and for generations to come. Our efforts result in more than 26 million people treated with our medicines and over 30 billion tests conducted using our Diagnostics products. We empower each other to explore new possibilities, foster creativity, and keep our ambitions high, so we can deliver life-changing healthcare solutions that make a global impact.\nLet’s build a healthier future, together.\nRoche is an Equal Opportunity Employer.","description_format":"text","description_chars":4799,"description_truncated":false,"requirements":{"experience_years_min":10,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Information Security","Artificial Intelligence","Biotechnology","Health Care"],"lifecycle":[{"event":"open","at":"2026-10-05T18:43:48Z"}],"visa":[],"liveness":{"score":31,"band":"fade","label":"Fading","p_open":1,"p_active":0.569,"p_room":0.55,"age_days":20,"expected_fill_days":19,"reasons":["conf:30","stale_co","velocity","win:tail","comp:brand"],"computed_at":"2026-10-26T05:57:25Z"},"pay":null,"html_url":"https://alion.io/job/roche-expert-information-security-privacy-governance","json_url":"https://alion.io/job/roche-expert-information-security-privacy-governance.json","meta":{"generated_at":"2026-10-26T22:04:16Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":29777,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-27T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":13531},"rest":"https://alion.io/mcp/rest/get_company?id=13531"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Froche-expert-information-security-privacy-governance"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Froche-expert-information-security-privacy-governance"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Froche-expert-information-security-privacy-governance"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/roche-expert-information-security-privacy-governance\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Froche-expert-information-security-privacy-governance"}]}