[Skip to main content](#main-content) [ OpenNash ](https://opennash.com/) / [Jobs](https://jobs.opennash.com/) [ 01 Search jobs](https://jobs.opennash.com/search/)[ 02 Companies](https://jobs.opennash.com/explore/)[ 03 Hiring report](https://jobs.opennash.com/reports/hiring/)[ 04 AI assistants](https://jobs.opennash.com/connect/)[ 05 How it works](https://jobs.opennash.com/methodology/) Roche Holding · Sant Cugat del Vallès # Cybersecurity & Privacy Risk and Compliance Manager Sant Cugat del Vallès Full-time Manager or lead Security Listed on Roche Holding’s official careers site. Posted November 4, 2026. Check that it is still open and apply there. [Apply on Roche Holding’s careers site →](https://roche.wd3.myworkdayjobs.com/roche-ext/job/Sant-Cugat-del-Valls/Cybersecurity---Privacy-Risk-and-Compliance-Manager_202611-128258) [OpenNash Jobs](https://jobs.opennash.com/) / [Roche Holding](https://jobs.opennash.com/companies/roche-holding/) / Cybersecurity & Privacy Risk and Compliance Manager ## Job description At Roche you can show up as yourself, embraced for the unique qualities you bring. Our culture encourages personal expression, open dialogue, and genuine connections, where you are valued, accepted and respected for who you are, allowing you to thrive both personally and professionally. This is how we aim to prevent, stop and cure diseases and ensure everyone has access to healthcare today and for generations to come. Join Roche, where every voice matters. The Position ### Position Overview The Cybersecurity & Privacy Risk Manager leads the development, execution, and continuous optimization of a robust, unified cybersecurity and privacy risk management framework across the enterprise. Operating globally within a Scaled Agile Framework (SAFe) environment, this role ensures that technology, digital healthcare solutions, and information assets remain secure, compliant, and resilient against evolving threats. By translating risk data into strategic actionable insights, the Risk Manager enables key decision-makers—from tactical Business Risk Owners to Senior Executive Leadership—to make informed, proactive decisions regarding risk tolerance, investment priorities, and governance. ### Key Responsibilities Risk Assessment & Framework Execution: Drive comprehensive risk assessments across global business operations and product groups, identifying potential cybersecurity and privacy vulnerabilities, operational risks, and regulatory exposures. ### Executive & Governance Reporting Formulate quantitative and qualitative risk reports and dashboards tailored for both operational Risk Owners and Senior Management decision-makers, establishing clear exposure visibility and strategic mitigation paths. ### Risk Tolerance & Strategy Alignment Define, monitor, and enforce risk tolerance thresholds aligned with overall business goals and regulatory mandates (GDPR, HIPAA, ISO standards). ### Thought Leadership & Remediation Advisory Provide expert consultative guidance on remediation strategies, risk treatment plans, and process improvements, demonstrating ROI on risk mitigation investments. ### Cross-Functional & Global Collaboration Partner closely with global Security, Privacy, Legal, Quality & Regulatory, and Business units to embed security-by-design and privacy-by-design principles throughout the organizational lifecycle. ### Requirements & Experience Education: Bachelor’s degree in Computer Science, Information Security, Business Information Systems, or a related field (Master’s degree preferred). ### Experience 6+ years of experience in cybersecurity, privacy risk management, compliance, or information security governance within large-scale, multinational environments. ### Agile & Framework Expertise Demonstrated experience operating within Scaled Agile (SAFe) and Agile frameworks, managing risks across matrixed development teams and governance levels. ### Compliance & Regulatory Knowledge Deep familiarity with global privacy regulations (GDPR, HIPAA) and cybersecurity standards (ISO 27001, NIST, CIS). ### Stakeholder Communication Proven ability to engage, challenge, and influence decision-makers at both operational risk-owner levels and Senior Management forums. ### Industry Background Prior experience in healthcare, medical diagnostics, pharmaceuticals, or regulated digital software environments is strongly preferred. ### Preferred Qualifications & Certifications Relevant industry certifications CISA, CISM, CRISC, CISSP, ISO 27001 Lead Auditor, or equivalent. Strong data analytical capabilities with the ability to build risk models and present metric-driven strategies. Exemplary "Zoom Out / Zoom In" capability—able to define overarching global strategies while diving into granular technical risk scenarios when communicating with subject matter experts. Who we are A healthier future drives us to innovate. Together, more than 100’000 employees across the globe are dedicated to advance science, ensuring everyone has access to healthcare today and for generations to come. Our efforts result in more than 26 million people treated with our medicines and over 30 billion tests conducted using our Diagnostics products. We empower each other to explore new possibilities, foster creativity, and keep our ambitions high, so we can deliver life-changing healthcare solutions that make a global impact. Let’s build a healthier future, together. Roche is an Equal Opportunity Employer. ## At a glance - Posted by the employer: Nov 4, 2026 - First seen by OpenNash: Nov 8, 2026 - Last checked: Nov 8, 2026 - Listed for: 4 days - Location: Sant Cugat del Vallès - Employment type: Full-time[Apply on Roche Holding’s careers site →](https://roche.wd3.myworkdayjobs.com/roche-ext/job/Sant-Cugat-del-Valls/Cybersecurity---Privacy-Risk-and-Compliance-Manager_202611-128258) ## Hiring at Roche Holding - Open jobs: 1,258 - New in the last 7 days: 216 - Tracked since: Jul 16, 2026 [All Roche Holding jobs](https://jobs.opennash.com/companies/roche-holding/) · [Weekly hiring report](/reports/hiring/) ## More jobs at Roche Holding ### [Cybersecurity Senior Penetration Tester](https://jobs.opennash.com/companies/roche-holding/jobs/c4c03a56e5248decbbb1/) Sant Cugat del Vallès ### [Design Quality Partner](https://jobs.opennash.com/companies/roche-holding/jobs/2a02a8fbc7a2873b8d62/) Sant Cugat del Vallès ### [DevOps Delivery Manager](https://jobs.opennash.com/companies/roche-holding/jobs/095908f983b020df1f88/) Sant Cugat del Vallès ### [Digital Enablement Manager](https://jobs.opennash.com/companies/roche-holding/jobs/80ba54191e2a8be297f0/) Sant Cugat del Vallès ### [Direct Procurement Excellence & Category Manager](https://jobs.opennash.com/companies/roche-holding/jobs/27652b8e284156046560/) Sant Cugat del Vallès ## Similar jobs at other companies ### [Senior Counsel - Privacy, Cybersecurity and AI - Hybrid](https://jobs.opennash.com/companies/aegon/jobs/0cf95b92961136111da6/) Aegon ### [Privacy and Cybersecurity Counsel - Europe and META](https://jobs.opennash.com/companies/lenovo-group/jobs/9a44d49ca409aeccd925/) Lenovo Group · Hungary, Budapest ### [Privacy and Cybersecurity Counsel - Europe and META](https://jobs.opennash.com/companies/lenovo-group/jobs/f0fb90adecd466ec1753/) Lenovo Group · Slovakia, Bratislavský kraj, Bratislava ### [Privacy/Cybersecurity Analyst](https://jobs.opennash.com/companies/sherwin-williams/jobs/a227b32586a64dddb542/) Sherwin-Williams · Bologna, Emilia Romagna, Italy ### [Cybersecurity & Data Privacy Analyst](https://jobs.opennash.com/companies/valeo/jobs/80551b383adfb77f721c/) Valeo · Prague [Security jobs](/functions/security/) OpenNash lists jobs from employers’ own careers sites and does not handle applications. Dates come from the employer where stated; “first seen” and “last checked” are our own observations. [ OpenNash ](https://opennash.com/) AI-native services firm that builds custom software and 24/7 AI agents. OpenNash Jobs is an OpenNash Applied AI project. [Book time with OpenNash](https://calendly.com/opennash/new-meeting?hide_gdpr_banner=1) Jobs - [Search jobs](https://jobs.opennash.com/search/) - [Companies](https://jobs.opennash.com/explore/) - [Hiring report](https://jobs.opennash.com/reports/hiring/) - [AI assistants](https://jobs.opennash.com/connect/) - [How it works](https://jobs.opennash.com/methodology/) OpenNash - [opennash.com](https://opennash.com/) - [Services](https://opennash.com/ai-agent-consulting/) - [OpenNash CX](https://opennash.com/cx/) - [AI Tools](https://opennash.com/ai-tools/) - [Blog](https://opennash.com/blog/) - [About](https://opennash.com/about/) Contact - [hello@opennash.com](mailto:hello@opennash.com) - [LinkedIn](https://www.linkedin.com/company/opennash) - [Support](https://jobs.opennash.com/support/) - [Privacy](https://jobs.opennash.com/privacy/) - [Terms](https://jobs.opennash.com/terms/) © 2026 OpenNash, Inc. Company names and public job postings belong to their respective owners. Employers control source availability and application decisions.