Senior Manager, Threat Remediation

Our Global Cyber Defense team is responsible for safeguarding Pfizers digital assets and infrastructure through proactive threat detection response and risk mitigation across on-premises cloud and hybrid environments.

The Senior Manager Threat Remediation is responsible for owning and driving the endtoend remediation of cybersecurity threats across the enterprise. This role sits at the intersection of threat detection incident response vulnerability management offensive security and technology risk ensuring that identified threats are prioritized mitigated and resolved in a timely riskbased and compliant manner.

This role will work closely with the SOC Cloud Services Infrastructure End User Computing Engineering GRC Legal Privacy and Business stakeholders to reduce cyber risk and improve the organizations overall security posture.

• Own the threat remediation lifecycle from intake of identified threats (incidents alerts vulnerabilities control gaps) through containment mitigation and closure.

• Translate threat intelligence SOC findings red team results penetration tests and vulnerability scans into actionable remediation plans.

• Ensure remediation actions are riskbased prioritized and aligned with business impact regulatory exposure and threat severity.

• Partner with Incident Response and SOC teams during active incidents to ensure effective containment and eradication strategies.

• Lead postincident remediation efforts ensuring root cause analysis (RCA) is completed and systemic issues are addressed.

• Track and validate completion of corrective and preventive actions (CAPAs) resulting from incidents.

• Work with IT engineering and application owners to resolve vulnerabilities while respecting validated system change controls.

• Ensure compensating controls are documented and approved where remediation is constrained due to regulatory or operational limitations.

• Define and report on remediation KPIs and KRIs (e.g. mean time to remediate overdue critical findings repeat issues).

• Provide executivelevel reporting on remediation status risk reduction and systemic weaknesses.

• Support internal and external audits regulatory inspections and security assessments by demonstrating effective remediation governance.

• Partner with detection threat intelligence and vulnerability teams to close gaps between detection and remediation.

• Contribute to longterm cyber defense strategy including roadmap planning and technology selection.

• Bachelors degree in Computer Science Information Security Engineering or a related technical discipline or equivalent experience.

• 7 years of experience in cybersecurity with hands-on involvement in remediation vulnerability management security engineering or incident response.

• Strong understanding of:

  • Threat actor tactics techniques and procedures (MITRE ATT&CK)

  • Incident response and containment strategies

  • Vulnerability management and remediation workflows

  • Cloud security (AWS Azure GCP)

  • Endpoint network identity and application security

• Familiarity with SOC tooling (SIEM SOAR EDR/XDR) vulnerability scanners and ticketing/workflow systems.

• Demonstrated experience in an agile work environment possessing qualities such as a collaborative mindset adaptability to change and a proactive problem-solving approach.

• Leadership experience managing or mentoring analysts and engineers.

• Working knowledge of GxP FDA 21 CFR Part 11 EMA HIPAA GDPR and other relevant regulations.

• Familiarity with security frameworks risk management practices and regulatory expectations relevant to pharmaceutical or life sciences organizations.

• Professional certifications such as CISSP CISM GIAC or equivalent credentials related to security operations or risk management.

Please apply by sending your CV and a motivational letter in English.

Work Location Assignment:Hybrid

To learn more about acceptable and prohibited uses of AI during the recruitment process please review our candidate AI-use guidelines available onPfizer Careers.