Product Security and Privacy Network Lead
Notify me about similar jobsAbout this opportunity
At Roche you can show up as yourself, embraced for the unique qualities you bring. Our culture encourages personal expression, open dialogue, and genuine connections, where you are valued, accepted and respected for who you are, allowing you to thrive both personally and professionally. This is how we aim to prevent, stop and cure diseases and ensure everyone has access to healthcare today and for generations to come. Join Roche, where every voice matters.
The Position
Position Overview
The PSPO RIS Network Lead serves as the primary strategic interface and business partner connecting Roche Information Solutions (RIS) leadership teams with the Product Security and Privacy Organization (PSPO). Embedded within a Scaled Agile Framework (SAFe) culture, the Network Lead translates business strategies, customer needs, and product roadmaps into clear, prioritized cybersecurity and privacy requirements for PSPO experts and squads.
Combining strong risk management expertise with business partner capabilities, the Network Lead collaborates with Customer Area (CA) Leadership Teams, Lifecycle Teams (LCTs), and global stakeholders to ensure digital solutions are secure, compliant, and positioned for long-term commercial success.
Key Responsibilities
Strategic Portfolio Alignment & Interface: Act as the central interface across RIS Customer Areas (CAs), Lifecycle Teams (LCTs), and Global Functions (R&D, ATSO, Q&R) to align cybersecurity and privacy roadmaps with business objectives.
Risk-Informed Business Decision Making: Conduct strategic portfolio reviews with RIS management teams, translating cybersecurity and privacy exposures into tangible business risks and value propositions to facilitate decision-making by Business Risk Owners and Senior Leadership.
Backlog & Resource Prioritization: Partner with PSPO Chapters, Network Leads, and Squads within the SAFe ecosystem to prioritize backlogs, aggregate demand, and balance capacity against business critical priorities.
Harmonization & Standard Adoption: Drive the seamless adoption of cybersecurity and privacy standards across the RIS diagnostics portfolio, eliminating operational silos and resolving escalations, dependencies, or delivery bottlenecks.
Governance & Value Proposition: Define mid- to long-term security roadmaps in tandem with Customer Areas, establishing clear visibility into progress, risk posture, and investment needs.
Requirements & Experience
Education: Bachelor’s degree in Information Security, Computer Science, Business Administration, or a related discipline (Master’s degree preferred).
Experience: 6+ years in cybersecurity/privacy program management, risk management, or strategic IT business relationship management within global, fast-paced environments.
Risk Management Expertise: Solid core background in cybersecurity and privacy risk concepts, enabling fluent engagement with technical experts and effective risk communication to business leaders.
Agile & Matrix Leadership: Proven track record leading in complex, highly matrixed organizations under Scaled Agile (SAFe) or Agile frameworks, managing stakeholder alignment across CAs, LCTs, and Chapter networks.
Stakeholder Influence & Business Acumen: Superior executive communication, negotiation, and strategic presentation skills, with a demonstrated ability to influence Senior Management and Business Risk Owners.
Industry Background: Preferred experience in medical devices, digital healthcare solutions, diagnostics, or software development environments.
Preferred Qualifications & Certifications
Certifications such as CISA, CISM, CRISC, CISSP, SAFe Agilist, or equivalent management/security credentials.
Proven capacity to act as an organizational "integrator", bridging technical security capabilities with commercial/business drivers.
A solution-oriented mindset with high comfort navigating ambiguity and matrixed decision-making structures.
Where pay transparency applies, details are provided based on the primary posting location. For this role, the primary location is Sant Cugat del Vallès. If you are interested in additional locations where the role may be available, we will provide the relevant compensation details later in the hiring process.
Who we are
A healthier future drives us to innovate. Together, more than 100’000 employees across the globe are dedicated to advance science, ensuring everyone has access to healthcare today and for generations to come. Our efforts result in more than 26 million people treated with our medicines and over 30 billion tests conducted using our Diagnostics products. We empower each other to explore new possibilities, foster creativity, and keep our ambitions high, so we can deliver life-changing healthcare solutions that make a global impact.
Let’s build a healthier future, together.
Roche is an Equal Opportunity Employer.
Job details
How this role compares
Computed from every other active Information Technology role in our database, not just this employer's listings.
We currently track 1649 comparable Information Technology roles across 98 biopharma companies.
Salary context
226 of 1649 peers report a salary range (USD, annualized)
Peers share this role's job function. This posting doesn't list a seniority level, so peers aren't narrowed by seniority either -- the range below may span more levels than usual.
Where these roles are based
Top locations among the 1649 comparable roles
+ 38 more countries
Seniority mix
980 of 1649 peers have a known seniority level
Therapeutic area mix
9 of 1649 peers have a known therapeutic area; the rest are genuinely unlabeled, not hidden
Similar opportunities
The closest matches from our peer group, ranked by how similar they are, not how well you'd qualify for them -- treat this as market context, not a guaranteed shortlist; a weak match is labeled as one below.
Notify me about similar jobs
Get an email when we spot other openings like this one – same job function, comparable seniority, roles you'd actually want to see.
Or follow a whole field: get every new Information Technology job in Spain, and choose locations and companies.
How we calculate "similar"
No black box, no LLM guesswork: a deterministic score built from four normalized attributes. Here's this role's own peer group at different match levels, so you can see the mechanism, not just the result.
Every comparison starts from the same 100-point budget: 25 for working in the same function, 40 for the same therapeutic area, 20 for the same or adjacent seniority, 15 for the same country. A dimension we can't confirm on both sides contributes nothing, never a guess, never a free pass.
0 points, never a partial guess. A role we know almost nothing about beyond its function bottoms out at 25%; it never inflates to 100% just because there's little to compare against. Seniority uses a defined ladder (Associate → Manager → Associate Director → Senior → Principal → Director → Senior Director → Executive/VP) so "Director" and "Senior Director" count as adjacent, but "Director" and "Executive/VP" do not.