Director, Third-Party Risk Management – Technical Information Security Lead

Pfizer

Pfizer cybersecurity director owning third-party risk management and technical security leadership. Advising executives and governing cyber risk across regulated pharmaceutical operations.

Posted 8/11/2026full-timeNew York City • New York • 🇺🇸 United StatesSenior💰 $176,600 - $294,300 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Third Party Risk Management (TPRM) and cybersecurity, with a strong focus on aligning risk strategies with business priorities and regulatory requirements. Proven ability to lead complex risk programs, influence executive decision-making, and drive continuous improvement in risk governance.

Highest-signal resume keywords

Third Party Risk Management (TPRM)CybersecurityGovernance, Risk, and Compliance (GRC)Risk Assessment and ManagementTeam Leadership and Development

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Cyber Risk ManagementSecurity ArchitectureRisk TieringContinuous MonitoringRisk Data InterpretationProgram ImprovementVendor Risk AssessmentCompensating ControlsRegulatory ComplianceAgile Methodologies

Soft Skills

Strategic ThinkingAnalytical Problem-SolvingExceptional CommunicationInterpersonal SkillsOrganizational Leadership

Industry Keywords

Pharmaceutical Regulatory ExpectationsExecutive OversightChange ManagementTalent DevelopmentStakeholder Engagement

Tech Stack

Tools & technologies

Cyber Security

About the role

Key responsibilities & impact

Own the enterprise Third Party Risk Management security strategy, program, and operating model
Align TPRM with enterprise cyber risk appetite, business priorities, and pharmaceutical regulatory expectations
Establish approaches for risk tiering, assessment depth, reassessment cadence, continuous monitoring, and exception governance
Provide executive-level oversight and approval for high-risk and critical vendor risk assessments
Lead governance for remediation prioritization, compensating controls, and formal risk acceptances
Escalate material vendor risks to enterprise risk committees and executive leadership
Serve as senior Technical Information Security Lead for high-impact initiatives, platforms, and transformations
Advise executive-level business and technology leaders on cybersecurity risk
Translate technical risks into executive-level insights and decision-ready recommendations
Partner with Procurement, Legal, Privacy, Quality, Security, Internal Audit, and business leadership
Influence contract standards and onboarding requirements to embed security, privacy, and resilience controls
Represent GRC in executive forums, governance bodies, and cross-functional steering committees
Set strategic priorities and outcomes, delegate execution, and maintain accountability
Drive talent development, succession planning, and capability maturity across the function

Requirements

What you’ll need

Bachelor’s degree with at least 8+ years of experience; OR a Master’s degree with more than 7+ years of experience; OR a Ph.D. with 5+ years of experience
8+ years of experience in cybersecurity, cyber risk, GRC, TPRM, security architecture, IT risk, or audit
Experience leading and developing teams, including direct people management responsibility for technical and cybersecurity professionals
Experience leading complex risk programs involving multiple stakeholders and competing priorities
Strong strategic thinking, analytical, and problem-solving capabilities
Ability to interpret risk data and drive informed decision-making
Exceptional communication and interpersonal skills
Strong organizational and leadership skills, including guiding teams, managing change, and driving continuous program improvement
Experience in an agile work environment, with adaptability and proactive problem-solving
Ability to work through a personal laptop computer or mobile device for extended periods
Travel as required by the business, less than 5% domestic and/or international
Must be able to work in an assigned Pfizer office 2-3 days per week, or as needed by the business
Candidates must be authorized to be employed in the U.S. by any employer
Permanent work authorization in the United States required
U.S. work visa sponsorship is not available now or in the future

Benefits

Comp & perks

Bonus target of 20.0% of base salary through Pfizer’s Global Performance Plan
Eligibility to participate in Pfizer’s share based long term incentive program
401(k) plan with Pfizer Matching Contributions
Additional Pfizer Retirement Savings Contribution
Paid vacation
Paid holiday and personal days
Paid caregiver/parental and medical leave
Medical, prescription drug, dental and vision coverage
Relocation assistance may be available based on business needs and/or eligibility