Director, Cyber & Digital Compliance

Our Global Governance, Risk, and Compliance (GRC) team provides comprehensive blueprints for cybersecurity excellence by embedding governance, risk management, and compliance into every layer.

We are seeking an experienced Director, Cyber & Digital Compliance, to lead the execution of governance, risk, and compliance activities across Digital processes and systems within a regulated environment.

Role Responsibilities

• Lead the execution of compliance activities across Digital systems, processes, and documentation, ensuring alignment with established quality and compliance requirements.
• Assess Digital processes and controls against internal quality standards, policies, procedures, and applicable regulatory expectations, identifying opportunities for improvement.
• Own the development, maintenance, and governance of SDLC documentation, including SOPs, workflows, process narratives, quality records, and evidence repositories.
• Lead audit and inspection readiness activities by coordinating evidence collection, facilitating walkthroughs, managing stakeholder inputs, and ensuring timely resolution of follow-up actions.
• Manage the identification, assessment, tracking, and remediation of quality issues, control gaps, risks, and deviations, ensuring appropriate escalation and closure.
• Lead quality and compliance reviews of system changes, enhancements, releases, and technology initiatives to identify potential risks and ensure adherence to GRC requirements.
• Oversee monitoring activities and quality metrics, analyzing trends and emerging risks and translating findings into actionable recommendations for stakeholders and leadership.
• Partner with cross-functional technology, quality, compliance, cybersecurity, and business teams to drive alignment, resolve issues, and ensure consistent execution of compliance requirements.
• Lead the development and continuous improvement of Digital Compliance procedures, methodologies, templates, controls, and supporting tools to increase consistency and operational effectiveness.
• Develop status reporting, metrics, dashboards, and management insights to communicate quality performance, risks, remediation progress, and compliance readiness.
• Identify opportunities to strengthen technology quality and compliance processes through standardization, automation, and continuous improvement.
• Provide guidance and subject matter expertise to team members and stakeholders on technology quality, compliance, and GRC requirements.
• Support the evolution of the Digital Compliance operating model by translating regulatory and organizational expectations into scalable, risk-based quality practices.

Basic Qualifications

• Bachelor’s degree in information systems, computer science, engineering, quality management, life sciences, or a related field.
• 8+ Experience in technology quality assurance, IT compliance, GRC, system support, or related discipline.
• Foundational understanding of IT processes, system lifecycle concepts, and basic quality or compliance principles.
• Strong knowledge in regulatory and industry frameworks such as GxP, CSV, ISO standards, or IT governance frameworks.
• Strong attention to detail with the ability to maintain accurate documentation and follow structured processes.
• Solid written and verbal communication skills.
• Ability to collaborate effectively with team members and cross-functional partners.
• Strong strategic thinking, analytical capability, and problem-solving skills.

Preferred Qualifications

• Familiarity with GxP, CSV, or other regulated system requirements.
• Exposure to IT or quality frameworks such as ISO standards or COBIT.
• Excellent strategic thinking.
• Deeply analytical and credible.
• Fact-based decision-making.
• Ability to challenge, influence, and support senior leadership.

Work Schedule, Travel or Environment Requirements

• Travel as required by the business (less than 20% domestic and/or international).
• Work Location Assignment: Must be able to work in assigned Pfizer office 2-3 days per week, or as needed by the business.
• This role is NOT remote.