Cybersecurity Governance, Risk, and Compliance - Regulatory Associate

ROLE SUMMARY
Our Global Governance, Risk, and Compliance (GRC) team provides comprehensive blueprints for cybersecurity excellence by embedding governance, risk management, and compliance into every layer. The team is responsible for ensuring risk-based decision-making is used and that security, privacy, and regulatory compliance is integrated seamlessly with Pfizer's organization.
We are seeking a detail-oriented Regulatory Associate to join our Cyber GRC team. This role supports the management of cybersecurity regulatory obligations, compliance activities, and regulatory readiness across the organization. The Cybersecurity Governance, Risk, and Compliance Regulatory Associate will help monitor applicable requirements, coordinate responses, maintain documentation, and support alignment with internal policies, standards, and industry frameworks.
ROLE RESPONSIBILITIES

• Support the identification, tracking, and maintenance of cybersecurity regulatory requirements applicable to the organization.
• Assist in monitoring changes to cybersecurity, privacy, technology, and industry regulations that may impact cyber compliance obligations.
• Help map regulatory requirements to internal cybersecurity policies, standards, controls, and procedures.
• Coordinate with Cybersecurity, IT, Legal, Privacy, Quality, Compliance, and business stakeholders to support regulatory readiness activities.
• Assist with the preparation of regulatory responses, compliance documentation, and supporting evidence.
• Maintain regulatory obligation inventories, compliance trackers, and related repositories.
• Support assessments of cybersecurity regulatory applicability, impact, and implementation status.
• Track regulatory action items, gaps, risks, and remediation activities through closure.
• Prepare status updates, metrics, dashboards, and summary materials for management and governance forums.
• Support internal reviews, audits, inspections, and assessments related to cybersecurity regulatory compliance.
• Help identify trends, emerging requirements, and opportunities to strengthen regulatory compliance processes.
• Contribute to the development and enhancement of regulatory compliance procedures, templates, and tools.
• Promote consistent documentation, traceability, and evidence management for regulatory obligations.

BASIC QUALIFICATIONS

• Bachelor's degree in Cybersecurity, Information Technology, Risk Management, Legal Studies, Compliance, Business, or a related field.
• Experience in cybersecurity, regulatory compliance, risk management, audit, privacy, legal operations, or a related discipline.
• Basic understanding of cybersecurity frameworks, regulations, and standards such as NIST CSF, ISO 27001, HIPAA, GDPR, SOX, GxP, FDA expectations, or other applicable requirements.
• Strong organizational, analytical, documentation, and communication skills.
• Ability to work across technical, legal, compliance, and business teams.
• Experience with GRC platforms, regulatory tracking tools, or compliance repositories is a plus.
• Demonstrated experience in an agile work environment possessing qualities such as a collaborative mindset, adaptability to change, and a proactive problem-solving approach.

PREFERRED QUALIFICATIONS

• Detail-oriented with strong follow-through and documentation discipline.
• Interest in cybersecurity regulations, compliance, and governance.
• Professional certifications such as CISSP, CISM, CRISC, CISA, PMP, or similar.

NON-STANDARD WORK SCHEDULE, TRAVEL OR ENVIRONMENT REQUIREMENTS

• Travel as required by the business (less than 20% domestic and/or international)

Work Location Assignment: Hybrid
Purpose
Breakthroughs that change patients' lives... At Pfizer we are a patient centric company, guided by our four values: courage, joy, equity and excellence. Our breakthrough culture lends itself to our dedication to transforming millions of lives.
Digital Transformation Strategy
One bold way we are achieving our purpose is through our company wide digital transformation strategy. We are leading the way in adopting new data, modelling and automated solutions to further digitize and accelerate drug discovery and development with the aim of enhancing health outcomes and the patient experience.
Flexibility
We aim to create a trusting, flexible workplace culture which encourages employees to achieve work life harmony, attracts talent and enables everyone to be their best working self. Let's start the conversation!
Equal Employment Opportunity
We believe that a diverse and inclusive workforce is crucial to building a successful business. As an employer, Pfizer is committed to celebrating this, in all its forms - allowing for us to be as diverse as the patients and communities we serve. Together, we continue to build a culture that encourages, supports and empowers our employees.
Disability Inclusion
Our mission is unleashing the power of all our people and we are proud to be a disability inclusive employer, ensuring equal employment opportunities for all candidates. We encourage you to put your best self forward with the knowledge and trust that we will make any reasonable adjustments to support your application and future career. Your journey with Pfizer starts here!
Pfizer endeavors to make www.pfizer.com/careers accessible to all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process and/or interviewing, please email [email protected]. This is to be used solely for accommodation requests with respect to the accessibility of our website, online application process and/or interviewing. Requests for any other reason will not be returned.
To learn more about acceptable and prohibited uses of AI during the recruitment process, please review our candidate AI-use guidelines available on Pfizer Careers .
Information & Business Tech