Senior Manager, Information Protection Engineering

About the role

The Global Cybersecurity Governance, Risk, and Compliance team is looking for a Senior Manager to lead and evolve information protection capabilities across Pfizer’s enterprise. You will oversee a team of engineers and collaborate with CISO, Privacy, Legal, R&D, and Cloud Services to protect sensitive scientific, clinical, patient, and business data.

Key responsibilities

• Define enterprise information protection strategy, reference architectures, and control frameworks for DLP, data discovery, classification, and encryption.
• Establish technical standards, guardrails, and design patterns for endpoints, cloud platforms, applications, and collaboration tools.
• Lead hands‑on implementation, configuration, and lifecycle governance of DLP, classification, discovery, and AI‑based protection solutions.
• Provide architectural guidance and design reviews for integrating protection controls into platforms and business solutions.
• Partner with Cloud, Infrastructure, and Identity teams on encryption, key management, and secrets management policies.
• Embed security‑by‑design principles throughout the application and platform lifecycle.
• Support Security Operations and Incident Response in detecting and responding to information protection incidents.
• Translate regulatory requirements (GDPR, HIPAA, SOX, GxP) into technical controls and report metrics on effectiveness and risk trends.

Required profile

• Bachelor’s degree in Information Security, Computer Science, Engineering or related field, or equivalent experience.
• 6+ years of experience designing, implementing, and operating enterprise‑scale information protection controls.
• Proven experience with DLP across endpoints, email, cloud platforms, and collaboration tools.
• Hands‑on experience with data classification, labeling, policy‑based enforcement, and encryption technologies.
• Experience integrating protection controls into cloud SaaS applications and large regulated environments.
• Ability to collaborate across engineering, digital, and operations teams in an agile setting.

Required skills

• Data Loss Prevention (DLP) solutions
• Data classification and labeling
• Data discovery technologies
• Encryption (data at rest and in transit) and key management
• Cloud platforms and SaaS application integration
• Security controls for regulated enterprises