Associate, Cyber Resilience

ROLE SUMMARY

Our Global Governance, Risk, and Compliance team provides comprehensive blueprints for cybersecurity excellence by embedding governance, risk management, and compliance into every layer. The team is responsible for ensuring risk-based decision-making is used and that security, privacy, and regulatory compliance is integrated seamlessly with Pfizer’s organization.

We are seeking an experienced Associate, Cyber Resilience to support the execution of our cyber resilience and operational readiness activities. This role will play a key part in helping ensure Pfizer can anticipate, withstand, respond to, and recover from cyber disruptions, technology failures, third‑party incidents, and operational crises—while maintaining GxP compliance, patient safety, data integrity, and regulatory continuity.

ROLE RESPONSIBILITIES

• Support the development, documentation, and maintenance of cyber resilience procedures, playbooks, and recovery documentation.

• Assist with cyber incident simulations, tabletop exercises, and recovery tests, including preparation of materials and tracking of outcomes.

• Assist in identifying critical systems, applications, and business dependencies to inform resilience and continuity planning.

• Support cyber risk and resilience assessments by gathering data, documenting findings, and tracking remediation actions.

• Assist with alignment to industry and regulatory frameworks (e.g., NIST CSF, ISO standards).

• Maintain evidence and documentation to support audits, assessments, and regulatory reviews.

• Track cyber resilience activities, risks, and issues using defined tools and processes.

• Support the preparation of metrics, reports, and dashboards for internal stakeholders.

• Assist in post‑incident or post‑exercise reviews to capture lessons learned and improvement opportunities.

BASIC QUALIFICATIONS

• Bachelor’s degree required in cybersecurity, information systems, risk management, or related discipline preferred.

• 1-3 years of experience in information security, risk, compliance, information protection, or related disciplines

• Basic understanding of cybersecurity, incident response, and IT operations concepts.

• Strong organizational, documentation, and communication skills.

• Ability to work collaboratively across technical and non‑technical teams.

PREFERRED QUALIFICATIONS

• Relevant certifications such as Security+, SSCP, GSEC, CEH, or other governance/risk credentials.

• Exposure to regulated environments (pharma, life sciences, healthcare, manufacturing).

• Familiarity with cybersecurity or resilience frameworks (e.g., NIST CSF).

• Experience supporting exercises, risk assessments, or operational readiness activities.

WORK SCHEDULE OR TRAVEL REQUIREMENTS

• Travel as required by the business (less than 5% domestic and/or international)

• Work Location Assignment: Must be able to work in assigned Pfizer office 2-3 days per week, or as needed by the business

  

Please apply by sending your CV and a motivational letter in English.

Work Location Assignment: Hybrid


Pfizer endeavors to make www.pfizer.com/careers accessible to all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process and/or interviewing, please email disabilityrecruitment@pfizer.com. This is to be used solely for accommodation requests with respect to the accessibility of our website, online application process and/or interviewing. Requests for any other reason will not be returned.



To learn more about acceptable and prohibited uses of AI during the recruitment process, please review our candidate AI-use guidelines available on Pfizer Careers.


Information & Business Tech