Product Security and Privacy Network Lead

Roche is hiring a Product Security and Privacy Network Lead. Level rates it ; you can apply on Roche.

Level's read on this job

Level rates this role Little AI ●○○○: aI is not part of the work.
Level classifies it as a lead role.
Level lists 1,200+ other open roles at Roche.
The role was posted in the last few days.

AI in this role

At Roche you can show up as yourself, embraced for the unique qualities you bring. Our culture encourages personal expression, open dialogue, and genuine connections, where you are valued, accepted and respected for who you are, allowing you to thrive both personally and professionally. This is how we aim to prevent, stop and cure diseases and ensure everyone has access to healthcare today and for generations to come. Join Roche, where every voice matters.

The Position

Position Overview

The PSPO RIS Network Lead serves as the primary strategic interface and business partner connecting Roche Information Solutions (RIS) leadership teams with the Product Security and Privacy Organization (PSPO). Embedded within a Scaled Agile Framework (SAFe) culture, the Network Lead translates business strategies, customer needs, and product roadmaps into clear, prioritized cybersecurity and privacy requirements for PSPO experts and squads.

Combining strong risk management expertise with business partner capabilities, the Network Lead collaborates with Customer Area (CA) Leadership Teams, Lifecycle Teams (LCTs), and global stakeholders to ensure digital solutions are secure, compliant, and positioned for long-term commercial success.

Key Responsibilities

Strategic Portfolio Alignment & Interface: Act as the central interface across RIS Customer Areas (CAs), Lifecycle Teams (LCTs), and Global Functions (R&D, ATSO, Q&R) to align cybersecurity and privacy roadmaps with business objectives.
Risk-Informed Business Decision Making: Conduct strategic portfolio reviews with RIS management teams, translating cybersecurity and privacy exposures into tangible business risks and value propositions to facilitate decision-making by Business Risk Owners and Senior Leadership.
Backlog & Resource Prioritization: Partner with PSPO Chapters, Network Leads, and Squads within the SAFe ecosystem to prioritize backlogs, aggregate demand, and balance capacity against business critical priorities.
Harmonization & Standard Adoption: Drive the seamless adoption of cybersecurity and privacy standards across the RIS diagnostics portfolio, eliminating operational silos and resolving escalations, dependencies, or delivery bottlenecks.
Governance & Value Proposition: Define mid- to long-term security roadmaps in tandem with Customer Areas, establishing clear visibility into progress, risk posture, and investment needs.

Requirements & Experience

Education: Bachelor’s degree in Information Security, Computer Science, Business Administration, or a related discipline (Master’s degree preferred).
Experience: 6+ years in cybersecurity/privacy program management, risk management, or strategic IT business relationship management within global, fast-paced environments.
Risk Management Expertise: Solid core background in cybersecurity and privacy risk concepts, enabling fluent engagement with technical experts and effective risk communication to business leaders.
Agile & Matrix Leadership: Proven track record leading in complex, highly matrixed organizations under Scaled Agile (SAFe) or Agile frameworks, managing stakeholder alignment across CAs, LCTs, and Chapter networks.
Stakeholder Influence & Business Acumen: Superior executive communication, negotiation, and strategic presentation skills, with a demonstrated ability to influence Senior Management and Business Risk Owners.
Industry Background: Preferred experience in medical devices, digital healthcare solutions, diagnostics, or software development environments.

Preferred Qualifications & Certifications

Certifications such as CISA, CISM, CRISC, CISSP, SAFe Agilist, or equivalent management/security credentials.
Proven capacity to act as an organizational "integrator", bridging technical security capabilities with commercial/business drivers.
A solution-oriented mindset with high comfort navigating ambiguity and matrixed decision-making structures.

Where pay transparency applies, details are provided based on the primary posting location. For this role, the primary location is Sant Cugat del Vallès. If you are interested in additional locations where the role may be available, we will provide the relevant compensation details later in the hiring process.

Who we are

A healthier future drives us to innovate. Together, more than 100’000 employees across the globe are dedicated to advance science, ensuring everyone has access to healthcare today and for generations to come. Our efforts result in more than 26 million people treated with our medicines and over 30 billion tests conducted using our Diagnostics products. We empower each other to explore new possibilities, foster creativity, and keep our ambitions high, so we can deliver life-changing healthcare solutions that make a global impact.

Let’s build a healthier future, together.

Roche is an Equal Opportunity Employer.

How we rate this

Product Security and Privacy Network Lead at Roche rates 36 out of 100 for how much of the daily work is AI. That makes it Little AI (AI Level 1 of 4). The level is about AI in the job, not seniority.

Classification

Little AI. AI is not part of the work.

●●●● Builds AI80 to 100
●●●○ Works on AI60 to 79
●●○○ Uses AI40 to 59
●○○○ Little AI0 to 39

Levels come from how often the tools, models and workflows of the role are named in the posting itself. Read the description and count the AI tools, models and workflows it names.