Director, Application Cloud Security

About the role

Pfizer's Global Cloud Services drives its digital transformation, and it is looking for an experienced Director of Application Cloud Security to lead the design, implementation and continuous improvement of enterprise application cloud security. The role ensures that software, APIs and digital products built and run across the enterprise are secure by design, resilient and aligned with business and regulatory requirements in a highly regulated pharmaceutical environment. It works closely with Digital and governance teams to embed security throughout the software development lifecycle.

Key responsibilities

• Lead the application cloud security function, setting strategy, priorities and roadmaps for software, APIs and digital products across cloud, web, mobile and enterprise applications.
• Design and maintain scalable security programs and secure development practices that meet regulatory and compliance obligations.
• Oversee the selection, deployment and lifecycle management of security tooling such as SAST, DAST, SCA and API security, so controls are effective and consistently applied across the SDLC.
• Partner with Digital, Cloud Services and Cyber Defense leadership to integrate security into product development, CI/CD pipelines and modernization initiatives.
• Establish secure coding standards, reference architectures and guardrails aligned to enterprise risk management and frameworks such as OWASP and NIST SSDF.
• Lead and develop high-performing security teams, and report risk insights to Cyber Defense leadership.

Required profile

• Bachelor's degree in Cloud Security, Cybersecurity, Computer Science, Information Systems or a related field.
• 10+ years of progressive experience in cybersecurity and application cloud security, including building and leading enterprise-scale security programs and teams.
• 5+ years of leadership experience managing security teams or programs.
• Demonstrated experience designing and running application cloud security controls across cloud, web, mobile, API and DevSecOps domains.
• Strong background in governance, risk management and compliance frameworks (ISO 27001, NIST, FDA regulations, GxP).

Preferred qualifications

• Certifications such as CISSP, CCNP or GIAC.
• Familiarity with OWASP ASVS/SAMM, NIST SSDF and Zero Trust architectures.
• Excellent communication, presentation and strategic thinking skills.

What we offer

• Annual base salary ranging from EUR 67,500 for the Thessaloniki location, with benefits varying by location (health care, retirement savings, insurance, employee assistance program, wellness benefits).
• Hybrid work arrangement.