{"id":2596731,"url":"https://alion.io/job/zuellig-pharma-principal-engineer-information-data-privacy","title":"Principal Engineer, Information & Data Privacy","company":{"id":1925404,"name":"Zuellig Pharma","domain":"zuelligpharma.com","url":"https://alion.io/company/zuelligpharma","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SuccessFactors","truth_index":{"grade":"A","score":100,"open_postings":3,"ghost_share":0,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":21,"computed_at":"2026-11-04T06:34:25Z"}},"role":"Legal","role_family":"Legal","seniority":"lead","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Malaysia"],"countries":["MY"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"ISO 27001","optional":false},{"name":"Microsoft Office","optional":false}],"status":"live","first_seen_at":"2026-09-24T02:00:00Z","employer_posted_date":"2026-10-23","last_verified_at":"2026-11-04T12:09:07Z","board_verified":true,"closed_at":null,"days_open":41,"trust":{"level":"ok","repost_count":1,"flags":[],"days_open":41},"description":"Zuellig Pharma is a leading healthcare solutions company in Asia, and our purpose is to make healthcare more accessible to the communities we serve. We provide world-class distribution, digital, and commercial services to support the growing healthcare needs in this region.\nThe company was started a hundred years ago and has grown to become a multibillion-dollar business covering 17 markets with over 12,000 employees. Our people serve more than 200,000 medical facilities and work with over 450 clients, including the top 20 pharmaceutical companies in the world.\nPurpose of the Role:\nThe Principal Engineer for Information & Data Privacy will lead the strategic design, implementation, and management of the enterprise-wide Information Security Management System (ISMS) based on the ISO 27001 framework. This role acts as the central subject matter expert, responsible for developing robust information security and data privacy policies, conducting comprehensive risk assessments, and ensuring compliance across all markets.\nBy driving security awareness, guiding audit activities, and providing expert consultation to all business units, this position is critical to safeguarding Zuellig Pharma's information assets and upholding our commitment to making healthcare accessible in a secure and trusted manner.\nWhat You’ll Do:\nLeads the design, implementation, operation and maintenance of ISO 27001 Information Security Management System for ZP enterprise which includes the development of audit program related to ISMS for ZPAP ROHQ and cascaded to the Markets IT Heads/Managers in adapting the same.\nDevelop and maintain information security policy, standards, and procedures align with ISO 27000 Framework and other industry best practices standards such as NIST and others.\nPerform and conducts risk assessment for ZPAP and provide guidance to ZP Market IT Heads/Managers or designated support ream in performing such risk assessment with data privacy and cybersecurity.\nAssist the ZP Market IT Heads/Manager in performing internal audit activities preparation in relation to ISO 27001 ISMS activities\nAct as an internal consulting resource on information security issues and data privacy protections for Zuellig Pharma enterprise.\nConduct information security risk assessments that includes data privacy and cybersecurity controls.\nIdentifies technology, process, or administrative controls to address an audit findings or non-conformities by applying the corrective and preventive controls\nPerform review of IT security compliance documentations (policies, standards, and procedures) for ZP in a periodic basis and cascading to ZP Market IT Heads/Managers for consumption and roll out.\nReview the compliance of ZP Markets, Business Units and Enabling Functions on data protection policies and controls.\nConducts Privacy Impact Assessment in coordination to internal stakeholders and business units and ensure that consent forms are up-to-date and development of data privacy program for ZP enterprise\nCoordinate and be active in information security efforts within and across ZP business units, and cooperate with the IT, HR, legal, financial, and executive offices.\nProvide periodic reporting on information security issues to IT management and from time to time report to the Information Technology Steering Committee\nFormulate and maintain information security awareness and data privacy programs for the enterprise and cascade the same to Business Units for implementation and ensure to improve the mentioned security programs.\nLiaises with various Markets HR teams, Business Units, Markets IT Heads/Managers for the implementation of security awareness compliance and data privacy programs and monitoring the KPIs.\nProvide assistance to the concerned team regarding the Business Continuity and Disaster Recovery best practices with respect to the result of the risk assessment on ZP system.\nPerform IT Security and Data Privacy due diligence activities for vendors and technology solutions to ensure that meets the cybersecurity controls of Zuellig Pharma\nAssist the ZP Business Units, Markets, and Enabling Function team such as legal team in reviewing MSA, Scope of Work, and other related documentation associated to a contract.\nLeads the preparation for any IT audit activities (initiated by internal or external) within ZP enterprise and helping various ZP Markets IT Head/Manager and teams with the preparations as well\nLiaises with SAP GRC team of ZP for the access controls activities that needs collaboration with the cybersecurity team.\nHelps the ZP enterprise cybersecurity and infrastructure teams to ensure technology controls are aligned with the current policies, standards, and procedures through technical audits\nPerform the monitoring of KPI scores of ZP Market IT and report to ZPAP Management\nResponsible in updating the Cybersecurity Audit Committee slides and ensures that the report is accurate based on the information gathered from the Markets IT Support\nAssist the cybersecurity team in performing technical security audit activities for ZPAP and ZP Enterprise.\nWhat will make you successful:\nMust-Have:\nBachelor's degree in MIS / Business / IT or a similar subject with strong exposure to information technology.\nPreferably, with IT Security Certifications such as ISO-LA, CISA, and the like, preferably.\nAt least 5-8 years of professional experience in IT Security and Compliance\nAt least 3 years of professional experience in Data Privacy and Compliance\nExperience in working in a multinational company\nExperience in conducting Risk Assessment\nExperience in performing IT Systems Audit, or ISO 27001 internal audit\nExperience in policy & standard development and implementation align with ISO 27001 (e.g., performing internal audits align with the framework)\nExperience in development a security and data privacy awareness education program for the organization\nAdvantage to Have:\nStrong knowledge on ISO 27001 ISMS and IT Security processes\nAdvanced knowledge of Data Privacy Protection practices\nAdvanced knowledge on NIST Cybersecurity publications\nKnowledgeable in GRC for SAP Systems\nAble to comprehend IT technology concepts and able to translate into a framework or process flow\nGood communications and technical writing skills to support the function in developing security policies, standards and procedures and cascading to internal stake holders\nAdvanced know how in using the Microsoft Office Applications\nFamiliarity with MS Conditional Access, Intune MDM, TPRM Tools\nAble to understand the logs and can conduct investigation and formulate a root cause analysis through a documentation\nAble to represent the audit results to management with an ease and avoiding technicalities for better appreciation of the ZP Management\nAbility to identify the work required and organize, facilitate and / or perform the work with only minimal guidance from senior management.\nExcellent analytical skills\nAble to work with very minimal supervision\nWhat we offer:\nWe are committed to fostering an inclusive environment where our employees can learn, grow, and achieve shared success.\nWe champion diversity, equity, and inclusion, ensuring every individual feels valued, respected, and treated fairly.\nAs a leading multi-market healthcare solutions provider, we empower our employees to gain comprehensive knowledge and expertise in the dynamic healthcare industry across the region.\nEnjoy the flexibility to effectively balance your work and personal life while taking charge of your career journey through our empowering growth opportunities.\nOur Total Rewards program is designed to support your overall well-being in every aspect.","description_format":"text","description_chars":7676,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Equity","Growth opportunities"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Information Security","Pharmaceutical Distribution","Medical Equipment Distribution","Pharma Marketing & Medical Communications"],"lifecycle":[{"event":"open","at":"2026-10-15T07:24:37Z"},{"event":"close","at":"2026-10-31T03:19:19Z"},{"event":"reopen","at":"2026-11-03T00:01:45Z"}],"visa":[],"liveness":{"score":30,"band":"fade","label":"Fading","p_open":1,"p_active":0.678,"p_room":0.45,"age_days":41,"expected_fill_days":21,"reasons":["conf:6","velocity","win:tail"],"computed_at":"2026-11-04T06:34:25Z"},"pay":null,"html_url":"https://alion.io/job/zuellig-pharma-principal-engineer-information-data-privacy","json_url":"https://alion.io/job/zuellig-pharma-principal-engineer-information-data-privacy.json","meta":{"generated_at":"2026-11-04T15:14:37Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":23159,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-05T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1925404},"rest":"https://alion.io/mcp/rest/get_company?id=1925404"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fzuellig-pharma-principal-engineer-information-data-privacy"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fzuellig-pharma-principal-engineer-information-data-privacy"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fzuellig-pharma-principal-engineer-information-data-privacy"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/zuellig-pharma-principal-engineer-information-data-privacy\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fzuellig-pharma-principal-engineer-information-data-privacy"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":2596731}},{"tool":"search_jobs","arguments":{"company":"zuelligpharma.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":2596731},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}