Information Security Governance Expert

Experteer Overview As an Expert in Roche’s ISPA team, you act as a strategic partner for global Engineering hubs, leading high-impact security and privacy risk assessments to ensure digital initiatives are secure by design and compliant.You translate legal requirements into technical controls and contribute to secure design patterns for emerging tech like GenAI and cloud-native ecosystems.You play a key role in risk governance using data-driven, audit-ready approaches and foster knowledge sharing within a global expert community.This role offers meaningful impact across Roche’s digital landscape and global projects, tying security to the company’s mission of expanding healthcare access.Compensaciones / Beneficios * Lead Security Expert Reviews (SER) for complex architectures with deep technical and privacy evaluations to mitigate residual risk.* Bridge IT, Legal, and Data Protection Officers to translate mandates into actionable controls.* Contribute to Security Design Patterns and Technical Baselines for GenAI and Cloud-native ecosystems.* Use ServiceNow IRM to ensure integrity and audit-ready risk advisory outcomes.* Foster a Four-Eye quality culture through peer reviews and global knowledge exchange.Responsabilidades * 5-10 years in Information Security/GRC with proven experience in risk assessments and DPIAs in global environments.* Strong security architecture knowledge and ability to translate legal requirements into engineering terms.* Expertise in international privacy frameworks (GDPR, CCPA, HIPAA) and standards (ISO **, NIST). Experience with ServiceNow IRM to document and execute risk assessments.* Degree in Computer Science or Legal; professional certifications (CISSP, CISM, CRISC, CIPP/E, CIPM, ISO** Lead Auditor) valued. Exceptional stakeholder management and ability to drive consensus across a global organization.Requisitos principales *

Responsabilidades * 5-10 years in Information Security/GRC with proven experience in risk assessments and DPIAs in global environments.

• Strong security architecture knowledge and ability to translate legal requirements into engineering terms.
• Expertise in international privacy frameworks (GDPR, CCPA, HIPAA) and standards (ISO *****, NIST).
• Experience with ServiceNow IRM to document and execute risk assessments.
• Degree in Computer Science or Legal; professional certifications (CISSP, CISM, CRISC, CIPP/E, CIPM, ISO***** Lead Auditor) valued.
• Exceptional stakeholder management and ability to drive consensus across a global organization.