Manager – GRC Technology

ROLE SUMMARY

Our Global Governance, Risk, and Compliance (GRC) team provides comprehensive blueprints for cybersecurity excellence by embedding governance, risk management, and compliance into every layer. The team is responsible for ensuring risk-based decision-making is used and that security, privacy, and regulatory compliance is integrated seamlessly with Pfizer’s organization.

We are seeking a Manager, Technology, Metrics, and Automation who will guide how the organization leverages data, automation, and technical platforms to advance security and risk management outcomes. The role oversees the design and governance of data pipelines, reporting systems, and automated workflows that ensure accurate, reliable, and timely information flows throughout the environment. By integrating technology solutions with operational processes, this role enables teams to monitor performance, identify systemic risks, and make informed decisions that strengthen organizational resilience.

ROLE RESPONSIBILITIES

• Define and execute the technology roadmap for Cyber GRC tooling, aligned to enterprise risk priorities, regulatory requirements, and operating model maturity.

• Partner with IT and platform teams on system upgrades, integrations, data feeds, and configuration enhancements.

• Define and govern a comprehensive set of Cyber GRC metrics, KPIs, and KRIs that provide actionable insights into Pfizer’s GRC environment.

• Ensure metrics are risk‑aligned, standardized, and decision‑useful, not just activity‑based.

• Develop executive‑level dashboards for senior leadership, risk committees, and governance forums.

• Identify and drive automation opportunities across Cyber GRC processes to reduce manual effort, improve data quality, and increase consistency.

• Lead implementation of workflow automation, approvals, notifications, evidence collection, and reporting capabilities.

• Ensure alignment between GRC data and enterprise data standards.

• Partner with data/analytics teams to enable scalable reporting solutions (e.g., BI tools, dashboards, automation pipelines).

• Serve as a key partner to Cybersecurity leadership, IT, Infrastructure, Cloud Services, Privacy, Quality, and Internal Audit.

• Translate stakeholder needs into practical technology and reporting solutions.

• Influence adoption and consistent use of GRC platforms across global teams.

• Act as a key contributor during internal audits, external audits, and regulatory inspections, ensuring metrics and system outputs are defensible and traceable.

BASIC QUALIFICATIONS

• Applicant must have a bachelor's degree with at least 4 years of experience; OR a master's degree with at least 2 years of experience; OR a PhD with 0+ years of experience; OR as associate's degree with 8 years of experience; OR a high school diploma (or equivalent) and 10 years of relevant experience.

• 4+ years of experience in information technology or cybersecurity.

• Ability to manage multiple priorities, work with cross-functional teams, and deliver high-quality outputs.

• Strong experience with GRC platforms, reporting, and workflow automation.

• Demonstrated ability to design metrics and dashboards that support executive decision‑making.

• Strong stakeholder management and communication skills, including executive‑level presentations.

• Experience operating in a highly regulated, matrixed enterprise environment.

• Demonstrated experience in an agile work environment possessing qualities such as a collaborative mindset, adaptability to change, and a proactive problem-solving approach.

PREFERRED QUALIFICATIONS

• Bachelor’s degree in information technology, cybersecurity, computer science, or a related field.

• Demonstrated experience working in pharmaceuticals industry.

• Professional certifications such as CISSP, CISM, CRISC, CISA, PMP, or similar.

• Hands‑on experience with tools such as ServiceNow GRC, Archer, Power BI, Tableau, or similar.

• Experience in large, complex, or regulated environments.

NON-STANDARD WORK SCHEDULE, TRAVEL OR ENVIRONMENT REQUIREMENTS

• Travel as required by the business (less than 20% domestic and/or international)

• Work Location Assignment: Must be able to work in assigned Pfizer office 2-3 days per week, or as needed by the business

• This role is NOT remote

Work Location Assignment: Hybrid

The annual base salary for this position ranges from $99,200.00 to $165,400.00. In addition, this position is eligible for participation in Pfizer’s Global Performance Plan with a bonus target of 12.5% of the base salary and eligibility to participate in our share based long term incentive program. We offer comprehensive and generous benefits and programs to help our colleagues lead healthy lives and to support each of life’s moments. Benefits offered include a 401(k) plan with Pfizer Matching Contributions and an additional Pfizer Retirement Savings Contribution, paid vacation, holiday and personal days, paid caregiver/parental and medical leave, and health benefits to include medical, prescription drug, dental and vision coverage. Learn more at Pfizer Candidate Site – U.S. Benefits | (uscandidates.mypfizerbenefits.com). Pfizer compensation structures and benefit packages are aligned based on the location of hire. The United States salary range provided does not apply to Tampa, FL or any location outside of the United States. This role is posted in multiple locations. If you are applying for the role in an secondary job posting location where pay transparency regulations apply, your Talent Advisor will share the local pay information with you during the first interview.

Relocation assistance may be available based on business needs and/or eligibility.

Candidates must be authorized to be employed in the U.S. by any employer.

U.S. work visa sponsorship (such as TN, O-1, H-1B, etc.) is not available for this role now or in the future.

To learn more about acceptable and prohibited uses of AI during the recruitment process, please review our candidate AI-use guidelines available on Pfizer Careers.

Information & Business Tech