Data Security Program Lead (Ciudad de Mexico, Ciudad de México, MX, 01210)

.

About Astellas 

Astellas is a global life sciences company committed to turning innovative science into VALUE for patients. We provide transformative therapies in disease areas that include oncology, ophthalmology, urology, immunology and women's health. Through our research and development programs, we are pioneering new healthcare solutions for diseases with high unmet medical need. Learn more at Astellas.com .

Are you driven to make a real difference in the lives of patients? 

We're seeking passionate individuals who thrive in dynamic environments, embrace new ideas, and aren't afraid to take intelligent risks. People who act with unwavering integrity and are deeply committed to making a tangible impact.

Working Environment and Location

This position is based in Mexico City (Santa Fe area) and will require on-site work in a hybrid set up.

At Astellas we recognize the importance of work/life balance, and we are proud to offer a hybrid working solution allowing time to connect with colleagues at the office with the flexibility to also work from home. We believe this will optimize the most productive work environment for all employees to succeed and deliver. Hybrid work from certain locations may be permitted in accordance with Astellas’ Responsible Flexibility Guidelines.

Purpose and Scope

Shape how a global pharmaceutical company protects its most sensitive information. As Data Security Program Lead, you will work with business leaders to identify the data that matters most, translate it into clear policy and protection requirements for our data security engineering team, and help employees around the world handle data safely as we roll out new labeling and data loss prevention controls across Microsoft 365, endpoints and AI tools

Role and Responsibilities

Astellas' enterprise data protection program across all business functions, including research, clinical, manufacturing and commercial data, covering Microsoft 365, endpoints, web and AI tools. Based in Mexico and supporting stakeholders globally, with a focus on the Americas.

Business Engagement & Discovery : Lead workshops and interviews with data owners and business leaders to understand how each function creates, stores and shares sensitive information. Prepare focused, function-specific materials so sessions are efficient, and build lasting relationships with data owners and business partners.

Crown Jewels & Use Cases : Maintain the register of Astellas' most sensitive data ('crown jewels') with Legal and data owners. Translate business needs into prioritized, documented protection use cases for the Data Security Engineering Lead, what data, which channels, what action and which users, and confirm results with the business before controls are enforced.

Policy & Procedures : Draft and maintain the policies, standards and SOPs for the data security program, including data classification and handling, sensitivity labeling, data loss prevention, exceptions and the use of data in AI tools. Keep them aligned with regulations such as GDPR, HIPAA, Japan's APPI and GxP, and publish them through Astellas' controlled document process.

Continue:Role and Responsibilities

Exceptions : Review and decide data protection exception requests through the established policy exception process, weighing business justification, compensating controls and expiry dates. Use exception trends to identify where policies, procedures or controls need to change.

User Education & Coaching : Design and deliver role-based training and communications for each control rollout, covering labeling, data loss warnings, safe sharing and responsible use of AI tools. Coach data owners and business partners, follow up with users and teams where data loss or insider risk trends show repeated risky behavior, and build a network of data protection champions across functions and regions.

Adoption & Reporting : Track adoption, user overrides and feedback, and review trends regularly with the Insider Risk team; use these insights to target user engagement and to give the engineering team clear tuning priorities; and report program progress to leadership.

Program Leadership: Own the data protection policy and adoption roadmap; represent the program at steering committee and governance forums; oversee our implementation partner's delivery of policy, workshop and adoption work; and mentor team members and data protection champions.

Essential Qualifications

Bachelor's degree in Information Systems, Cybersecurity, Business or a related field.

10+ years in information security, data protection or data governance, including 5+ years leading a data classification, information protection or data loss prevention program in a global organization.

Experience leading cross-functional initiatives with global stakeholders and overseeing external partners or vendors, including leading or mentoring a team.

Proven experience writing and maintaining policies, standards and SOPs, preferably in a regulated industry.

Experience leading workshops with business stakeholders and translating business needs into clear requirements.

Experience designing and delivering security awareness, training or change programs.

Excellent written and spoken English, with the ability to explain data protection in plain language to non-technical audiences.

Preferred Qualifications

Experience in pharmaceutical, life sciences or other regulated industries, including GxP and clinical data.

Working familiarity with Microsoft Purview concepts (sensitivity labels, data loss prevention) or comparable tools.

Knowledge of privacy and data protection regulations such as GDPR, HIPAA and Japan's APPI.

English language skills.

Certifications such as CIPP, CIPM, CDPSE, CISM or CISSP.

Benefits

Careers | Astellas

Why Astellas

Global collaboration: Become part of a connected global business of like-minded life science leaders, all dedicated to improving patients' lives worldwide.

Real-world patient impact: Contribute to transformative therapies that reach patients around the world, knowing your work makes a difference every day.

Relentless Innovation: Join a company at the forefront of scientific breakthroughs, where you'll have the opportunity to shape the future of healthcare.

A Culture of Growth: Chart your own course within a supportive environment that values your contributions, champions your development, and empowers you to pursue your passions.

Our Organizational Values and Behaviors

Values: Integrity, Innovation and Impact sit at the heart of what we do.

Behaviors: We come together as ‘One Astellas’ , working with courage and a sense of urgency . We are outcome focused and consistently take accountability for our personal contribution.

Our Organisational Values and Behaviours

Integrity

Innovation

Impact

One Astellas

Accountability

Courage

Sense of Urgency

Outcome Focus

Skills and Capabilities

Organizational Focus