[Hiring] Manager, Security, Governance, Risk and Compliance @Jazz Pharmaceuticals

Role Description

Job Responsibilities

• Program & Governance Leadership
  • Coordinate, partner, and align security activities across security and IT teams supporting enterprise platforms and SaaS/PaaS environments.
  • Support implementation and ongoing maintenance of SaaS security governance processes aligned with internal policies, regulatory requirements, and industry standards.
  • Coordinate security initiatives across core platforms and provide status reporting, issue tracking, and risk visibility to leadership.
  • Track and report key risk indicators (KRIs), metrics, and compliance status to support decision-making and continuous improvement.
• Control Management & Compliance Operations
  • Help define, implement, and maintain security baselines, standards, and control frameworks for SaaS and PaaS solutions.
  • Support control lifecycle management, including control definition, documentation, and validation.
  • Assist in mapping controls to applicable frameworks (e.g., NIST, ISO 27001, OWASP) and support consistent implementation.
  • Support internal and external audits by ensuring audit readiness and evidence collection.
  • Help coordinate and support security assessments, testing activities, and risk evaluations.
• Risk & Exception Management
  • Coordinate activities within the security exception process, including risk documentation, stakeholder engagement, approval tracking, and remediation follow-up.
  • Monitor exception trends related to SaaS and PaaS workloads.
• SaaS Security & Platform Governance
  • Help coordinate security governance for critical platforms including Workday, Salesforce, Snowflake, ServiceNow, and Microsoft 365.
  • Support implementation and ongoing maintenance of approved security baselines for new and existing platform implementations.
  • Coordinate continuous control monitoring activities and assist in identifying configuration drift or compliance gaps.
  • Partner with platform owners to integrate security into configuration, change, and release management processes.
• Stakeholder Engagement & Enablement
  • Partner with business stakeholders to influence secure adoption and improve operational security maturity.
  • Collaborate with IAM and data governance teams to ensure strong access controls, RBAC models, and data protection practices across SaaS platforms.
  • Act as a liaison between security, compliance, IT, and business teams to support alignment, communication, and issue resolution.
• Third-Party Risk & Vendor Security
  • Coordinate with business stakeholders and vendors to ensure SaaS and PaaS solutions complete the SGRC Vendor Risk Management process and maintain required assessments.

Qualifications

• Experience in security program management, cloud security, SaaS governance, and SGRC functions.
• Strong knowledge of security frameworks (e.g., NIST, ISO 27001, OWASP).
• Demonstrated ability to operationalize policies into effective technical and procedural controls.
• Ability to influence cross-functional teams and effectively communicate risk to stakeholders at multiple levels.
• Familiarity with enterprise SaaS platforms and cloud security control environments.
• Experience supporting audits, compliance programs, and continuous control monitoring.
• Knowledge of identity and access management (IAM), data protection, and SaaS security architectures.
• Experience with metrics-driven security programs, including KPI/KRI development and reporting.
• Demonstrated ability to work effectively with business partners.
• Strong analytical, organizational, and stakeholder management skills.
• 5 years of experience in information security, cybersecurity governance, risk management, compliance, cloud security, or related disciplines.

Requirements

• Bachelor's degree.
• CISSP, CISM, CRISC, CCSK, or comparable security certification preferred.
• Cloud security certifications (AWS, Azure, or GCP) preferred.

Benefits

• Medical, dental and vision insurance.
• 401k retirement savings plan.
• Flexible paid vacation.
• Discretionary annual cash bonus or incentive compensation.
• Discretionary equity grants in accordance with Jazz’s Long Term Equity Incentive Plan.