LastWeek

LastThreeDays

Today

Aoristou

FullTime

Hybrid

We are seeking a motivated Manager, Technical Information Security Lead, who will serve as a senior, business‑aligned cybersecurity leader, responsible for partnering with business and technology stakeholders, executing and overseeing technical risk assessments, and driving risk‑informed decisions across complex initiatives and platforms.ROLE RESPONSIBILITIES<ul><li>Serve as the Technical Information Security Lead for assigned business units, programs, or technology domains.</li><li>Act as the primary interface between Cybersecurity/GRC and business stakeholders, ensuring security considerations are embedded early and effectively.</li><li>Build trusted relationships with Business Leaders, IT, Engineering, Cloud Services, Privacy, Legal, and other key stakeholders and teams.</li><li>Translate technical findings into clear, actionable risk statements and recommendations tailored to business audiences.</li><li>Partner with technology and business owners to define risk mitigation strategies, remediation plans, and compensating controls.</li><li>Support audit and inspection readiness by providing defensible risk narratives, assessment artifacts, and evidence.</li><li>Review and provide quality oversight of risk assessments and documentation.</li><li>Contribute to the evolution of risk assessment methodologies, standards, templates, and engagement models.</li><li>Identify opportunities to improve consistency, scalability, and efficiency across security risk engagement.</li><li>Prepare concise, executive‑level summaries for risk committees, governance forums, and senior leadership.</li><li>Provide thought leadership on emerging risks (e.g., cloud, AI, third‑party dependencies).</li></ul>BASIC QUALIFICATIONS<ul><li>Bachelor’s degree in Cybersecurity, Information Systems, Computer Science, Risk Management, or related field, or a related field.</li><li>5+ years of experience in information security, risk, compliance, information protection, or related disciplines.</li><li>Demonstrated experience leading technical risk assessments and stakeholder engagement.</li><li>Proven ability to communicate complex technical risks to senior business stakeholders.</li><li>Strong documentation, analytical, and decision‑making skills.</li><li>Experience operating in a highly regulated, matrixed enterprise environment.</li><li>Demonstrated experience in an agile work environment possessing qualities such as a collaborative mindset, adaptability to change, and a proactive problem-solving approach.</li></ul>PREFERRED QUALIFICATIONS<ul><li>Demonstrated experience working in the pharmaceuticals industry.</li><li>Professional certifications such as CISSP, CISM, CRISC, CISA, or similar.</li><li>Familiarity with GRC platforms (e.g., Archer).</li><li>Experience supporting regulatory inspections or major audits.</li></ul>&nbsp;&nbsp;

Manager, Technical Information Security Lead 4956352

We are seeking a Manager, Third Party Risk Management, who provides direction for how the organization evaluates and oversees its external vendors. This role maintains the framework that guides third party risk decisions, ensures vendor relationships follow organizational requirements, and supports consistent oversight across all engagements. It keeps the organization focused on understanding vendor risks, applying a structured approach to assessments, and maintaining reliable documentation that supports continuity and compliance.ROLE RESPONSIBILITIES<ul><li>Define and maintain third‑party risk management policies and procedures that outline how vendors are assessed, classified, and monitored.</li><li>Oversee the execution of the TPRM program.</li><li>Review inherent risk evaluations and due‑diligence assessments to confirm that relevant security, privacy, compliance, and operational risks are properly identified and documented.</li><li>Review high‑risk assessments, ensuring findings are well‑articulated, evidence‑based, and aligned with internal standards.</li><li>Lead governance for risk treatment decisions, including remediation plans, compensating controls, and formal risk acceptances/exceptions.</li><li>Ensure vendor records, assessments, contracts, and risk findings are accurate, complete, and maintained in accordance with TPRM expectations and regulatory requirements.</li><li>Coordinate communication with vendors to request clarifications, gather required evidence, and follow up on remediation activities. Prepare clear, concise reporting for leadership that summarizes third‑party risk posture, program performance, key issues, and emerging trends.</li><li>Partner with procurement, legal, security, and business stakeholders to ensure third‑party risks are understood and managed.</li><li>Partner with Legal and Procurement to ensure security and cyber requirements are embedded into contracts.</li><li>Identify opportunities to strengthen the TPRM process through improved workflow design, automation, standardization, and integration with other GRC processes.</li><li>Present on TPRM program to senior and executive leadership to provide actionable insights.</li></ul>BASIC QUALIFICATIONS<ul><li>Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, or a related field.</li><li>5+ years of experience in information security, risk, compliance, information protection, or related disciplines.</li><li>Experience with frameworks and standards such as NIST Cybersecurity Framework or ISO 27001.</li><li>Experience developing and maintaining vendor risk policies, SOPs, and compliance frameworks.</li><li>Ability to manage multiple priorities, work with cross-functional teams, and deliver high-quality outputs.</li><li>Capability to align cybersecurity strategy with business objectives and operational resilience goals.</li><li>Strong leadership, communication, and presentation skills, with the ability to translate complex security concepts into business-focused insights for senior executives.&nbsp;</li><li>Excellent communication and interpersonal skills; ability to influence across levels and functions.</li><li>Demonstrated experience in an agile work environment possessing qualities such as a collaborative mindset, adaptability to change, and a proactive problem-solving approach.</li></ul>PREFERRED QUALIFICATIONS<ul><li>Demonstrated experience working in pharmaceuticals industry and large, complex, or regulated environments.</li><li>Professional certifications such as CISSP, CISM, CRISC, CISA, PMP, or similar. </li><li>Hands‑on experience with TPRM/GRC platforms (e.g., Archer).</li></ul>

Job Ads Relationship Manager Μακεδονία, Information Technology / It

manager, technical information security lead 4956352

Pfizer Hellas

manager, third party risk management 4956348

Pfizer Hellas

Also hiring nearby:

Jobily.gr

For Employers

For Job Seekers

Company