Cybersecurity Governance, Risk, and Compliance Regulatory Associate

Our Global Governance Risk and Compliance (GRC) team provides comprehensive blueprints for cybersecurity excellence by embedding governance risk management and compliance into every layer. The team is responsible for ensuring risk-based decision-making is used and that security privacy and regulatory compliance is integrated seamlessly with Pfizers organization.

We are seeking a detail-oriented Regulatory Associate to join our Cyber GRC team. This role supports the management of cybersecurity regulatory obligations compliance activities and regulatory readiness across the organization. The Cybersecurity Governance Risk and Compliance Regulatory Associate will help monitor applicable requirements coordinate responses maintain documentation and support alignment with internal policies standards and industry frameworks.

ROLE RESPONSIBILITIES

• Support the identification tracking and maintenance of cybersecurity regulatory requirements applicable to the organization.
• Assist in monitoring changes to cybersecurity privacy technology and industry regulations that may impact cyber compliance obligations.
• Help map regulatory requirements to internal cybersecurity policies standards controls and procedures.
• Coordinate with Cybersecurity IT Legal Privacy Quality Compliance and business stakeholders to support regulatory readiness activities.
• Assist with the preparation of regulatory responses compliance documentation and supporting evidence.
• Maintain regulatory obligation inventories compliance trackers and related repositories.
• Support assessments of cybersecurity regulatory applicability impact and implementation status.
• Track regulatory action items gaps risks and remediation activities through closure.
• Prepare status updates metrics dashboards and summary materials for management and governance forums.
• Support internal reviews audits inspections and assessments related to cybersecurity regulatory compliance.
• Help identify trends emerging requirements and opportunities to strengthen regulatory compliance processes.
• Contribute to the development and enhancement of regulatory compliance procedures templates and tools.
• Promote consistent documentation traceability and evidence management for regulatory obligations.

BASIC QUALIFICATIONS

• Bachelors degree in Cybersecurity Information Technology Risk Management Legal Studies Compliance Business or a related field.
• Experience in cybersecurity regulatory compliance risk management audit privacy legal operations or a related discipline.
• Basic understanding of cybersecurity frameworks regulations and standards such as NIST CSF ISO 27001 HIPAA GDPR SOX GxP FDA expectations or other applicable requirements.
• Strong organizational analytical documentation and communication skills.
• Ability to work across technical legal compliance and business teams.
• Experience with GRC platforms regulatory tracking tools or compliance repositories is a plus.
• Demonstrated experience in an agile work environment possessing qualities such as a collaborative mindset adaptability to change and a proactive problem-solving approach.

PREFERRED QUALIFICATIONS

• Detail-oriented with strong follow-through and documentation discipline.
• Interest in cybersecurity regulations compliance and governance.
• Professional certifications such as CISSP CISM CRISC CISA PMP or similar.

NON-STANDARD WORK SCHEDULE TRAVEL OR ENVIRONMENT REQUIREMENTS

• Travel as required by the business (less than 20% domestic and/or international)

Work Location Assignment:Hybrid

To learn more about acceptable and prohibited uses of AI during the recruitment process please review our candidate AI-use guidelines available onPfizer Careers.