> Markdown version of [/jobs/ext/2788874-information-security-governance-expert](https://www.wearedevelopers.com/jobs/ext/2788874-information-security-governance-expert). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Information Security Governance Expert

- **Company:** Roche
- **Location:** Madrid, Spain
- **Contract:** Permanent contract
- **Skills:** Cloud Engineering, Cyber Security, Information Technology, Data Analytics, Servicenow
- **Published:** September 8, 2026
- **Apply:** https://www.buscojobs.com.es/information-security-governance-expert-en-madrid-ID-370242490

## About the Role

Responsabilidades * 5-10 years in Information Security/GRC with proven experience in risk assessments and DPIAs in global environments.

 * Strong security architecture knowledge and ability to translate legal requirements into engineering terms.
 * Expertise in international privacy frameworks (GDPR, CCPA, HIPAA) and standards (ISO *****, NIST).
 * Experience with ServiceNow IRM to document and execute risk assessments.
 * Degree in Computer Science or Legal; professional certifications (CISSP, CISM, CRISC, CIPP/E, CIPM, ISO***** Lead Auditor) valued.
 * Exceptional stakeholder management and ability to drive consensus across a global organization.

## Description

Experteer Overview As an Expert in Roche's ISPA team, you act as a strategic partner for global Engineering hubs, leading high-impact security and privacy risk assessments to ensure digital initiatives are secure by design and compliant.You translate legal requirements into technical controls and contribute to secure design patterns for emerging tech like GenAI and cloud-native ecosystems.You play a key role in risk governance using data-driven, audit-ready approaches and foster knowledge sharing within a global expert community.This role offers meaningful impact across Roche's digital landscape and global projects, tying security to the company's mission of expanding healthcare access.Compensaciones / Beneficios * Lead Security Expert Reviews (SER) for complex architectures with deep technical and privacy evaluations to mitigate residual risk.* Bridge IT, Legal, and Data Protection Officers to translate mandates into actionable controls.* Contribute to Security Design Patterns and Technical Baselines for GenAI and Cloud-native ecosystems.* Use ServiceNow IRM to ensure integrity and audit-ready risk advisory outcomes.* Foster a Four-Eye quality culture through peer reviews and global knowledge exchange.Responsabilidades * 5-10 years in Information Security/GRC with proven experience in risk assessments and DPIAs in global environments.* Strong security architecture knowledge and ability to translate legal requirements into engineering terms.* Expertise in international privacy frameworks (GDPR, CCPA, HIPAA) and standards (ISO *****, NIST).* Experience with ServiceNow IRM to document and execute risk assessments.* Degree in Computer Science or Legal; professional certifications (CISSP, CISM, CRISC, CIPP/E, CIPM, ISO***** Lead Auditor) valued.* Exceptional stakeholder management and ability to drive consensus across a global organization.Requisitos principales *


## Related Videos

- [Blueprints for Success: Steering a Global Data & AI Architecture](https://www.wearedevelopers.com/videos/1577-blueprints-for-success-steering-a-global-data-ai-architecture)
- [PySpark - Combining Machine Learning & Big Data](https://www.wearedevelopers.com/videos/44-pyspark-combining-machine-learning-big-data)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Applying Agile Principles to Incident Management ](https://www.wearedevelopers.com/videos/101-applying-agile-principles-to-incident-management)
- [Robots are coming into the wild! Full-Stack Robotics Engineers, be ready!](https://www.wearedevelopers.com/videos/479-robots-are-coming-into-the-wild-full-stack-robotics-engineers-be-ready)
- [How Data is Shaping our Games](https://www.wearedevelopers.com/videos/176-how-data-is-shaping-our-games)

## Related Articles

- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Best Companies to work for in London: Top 25 Companies in 2023](https://www.wearedevelopers.com/magazine/187-best-companies-to-work-for-in-london-top-25-companies-in-2023)
- [Welcome to Switzerland](https://www.wearedevelopers.com/magazine/4-welcome-to-switzerland)
- [Spanish Business Culture and Etiquette](https://www.wearedevelopers.com/magazine/353-spanish-business-culture-and-etiquette)
- [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries)
- [Software Developer Salary in Switzerland [2023]](https://www.wearedevelopers.com/magazine/215-software-developer-salary-in-switzerland-2023)