Cybersecurity & Privacy Risk and Compliance Manager

About the role

The Cybersecurity & Privacy Risk Manager leads the development, execution and continuous improvement of a unified cybersecurity and privacy risk management framework across the enterprise. Working globally within a Scaled Agile Framework (SAFe) environment, the role keeps technology, digital healthcare solutions and information assets secure, compliant and resilient against evolving threats. It turns risk data into strategic insights for Business Risk Owners and senior executives.

Key responsibilities

• Drive comprehensive risk assessments across global business operations and product groups, identifying cybersecurity and privacy vulnerabilities, operational risks and regulatory exposures.
• Produce quantitative and qualitative risk reports and dashboards for operational Risk Owners and senior management, showing exposure and mitigation options.
• Define, monitor and enforce risk tolerance thresholds aligned with business goals and regulations such as GDPR, HIPAA and ISO standards.
• Advise on remediation strategies, risk treatment plans and process improvements, showing the ROI of risk mitigation investments.
• Work with Security, Privacy, Legal, Quality & Regulatory and Business units to embed security-by-design and privacy-by-design principles.

Required profile

• Bachelor's degree in Computer Science, Information Security, Business Information Systems or a related field (Master's preferred).
• 6+ years of experience in cybersecurity, privacy risk management, compliance or information security governance in large multinational environments.
• Experience in healthcare, medical diagnostics, pharmaceuticals or regulated digital software is strongly preferred.
• Proven ability to influence decision-makers at operational and executive levels.

Required skills

• SAFe and Agile frameworks, managing risks across matrixed teams and governance levels.
• Knowledge of GDPR, HIPAA, ISO 27001, NIST and CIS.
• Certifications such as CISA, CISM, CRISC, CISSP or ISO 27001 Lead Auditor are preferred.
• Data analysis and risk modelling, with the ability to build metric-driven strategies.