Product Security and Privacy Network Lead

About the role

The PSPO RIS Network Lead acts as the main strategic interface between Roche Information Solutions (RIS) leadership teams and the Product Security and Privacy Organization (PSPO). Working within a Scaled Agile Framework (SAFe) environment, the role turns business strategy, customer needs and product roadmaps into clear, prioritized cybersecurity and privacy requirements for PSPO experts and squads. It also works with Customer Area (CA) Leadership Teams, Lifecycle Teams (LCTs) and global stakeholders to keep digital solutions secure, compliant and commercially viable.

Key responsibilities

• Act as the central interface across RIS Customer Areas, Lifecycle Teams and Global Functions (R&D, ATSO, Q&R) to align cybersecurity and privacy roadmaps with business objectives.
• Run strategic portfolio reviews with RIS management, turning cybersecurity and privacy exposures into business risks and value propositions for Business Risk Owners and senior leadership.
• Partner with PSPO Chapters, Network Leads and Squads to prioritize backlogs, aggregate demand and balance capacity against business priorities.
• Promote adoption of cybersecurity and privacy standards across the RIS diagnostics portfolio and resolve escalations, dependencies and delivery bottlenecks.
• Define mid- to long-term security roadmaps with Customer Areas, with visibility into progress, risk posture and investment needs.

Required profile

• Bachelor's degree in Information Security, Computer Science, Business Administration or a related field (Master's preferred).
• 6+ years in cybersecurity/privacy program management, risk management or strategic IT business relationship management in global, fast-paced environments.
• Solid background in cybersecurity and privacy risk concepts, able to communicate risk to business leaders.
• Proven leadership in complex, matrixed organizations under SAFe or Agile frameworks, influencing senior management and Business Risk Owners.
• Preferred: experience in medical devices, digital healthcare, diagnostics or software development.

Required skills

• Preferred certifications: CISA, CISM, CRISC, CISSP, SAFe Agilist or equivalent.
• Ability to bridge technical security capabilities with commercial drivers and navigate ambiguous, matrixed decisions.