Cybersecurity Governance, Risk, and Compliance - Regulatory Associate

ROLE SUMMARY

Our Global Governance, Risk, and Compliance (GRC) team provides comprehensive blueprints for cybersecurity excellence by embedding governance, risk management, and compliance into every layer. The team is responsible for ensuring risk-based decision-making is used and that security, privacy, and regulatory compliance is integrated seamlessly with Pfizer’s organization.

We are seeking a detail-oriented Regulatory Associate to join our Cyber GRC team. This role supports the management of cybersecurity regulatory obligations, compliance activities, and regulatory readiness across the organization. The Cybersecurity Governance, Risk, and Compliance Regulatory Associate will help monitor applicable requirements, coordinate responses, maintain documentation, and support alignment with internal policies, standards, and industry frameworks.

ROLE RESPONSIBILITIES

• Support the identification, tracking, and maintenance of cybersecurity regulatory requirements applicable to the organization.
• Assist in monitoring changes to cybersecurity, privacy, technology, and industry regulations that may impact cyber compliance obligations.
• Help map regulatory requirements to internal cybersecurity policies, standards, controls, and procedures.
• Coordinate with Cybersecurity, IT, Legal, Privacy, Quality, Compliance, and business stakeholders to support regulatory readiness activities.
• Assist with the preparation of regulatory responses, compliance documentation, and supporting evidence.
• Maintain regulatory obligation inventories, compliance trackers, and related repositories.
• Support assessments of cybersecurity regulatory applicability, impact, and implementation status.
• Track regulatory action items, gaps, risks, and remediation activities through closure.
• Prepare status updates, metrics, dashboards, and summary materials for management and governance forums.
• Support internal reviews, audits, inspections, and assessments related to cybersecurity regulatory compliance.
• Help identify trends, emerging requirements, and opportunities to strengthen regulatory compliance processes.
• Contribute to the development and enhancement of regulatory compliance procedures, templates, and tools.
• Promote consistent documentation, traceability, and evidence management for regulatory obligations.

BASIC QUALIFICATIONS

• Bachelor’s degree in Cybersecurity, Information Technology, Risk Management, Legal Studies, Compliance, Business, or a related field.
• Experience in cybersecurity, regulatory compliance, risk management, audit, privacy, legal operations, or a related discipline.
• Basic understanding of cybersecurity frameworks, regulations, and standards such as NIST CSF, ISO 27001, HIPAA, GDPR, SOX, GxP, FDA expectations, or other applicable requirements.
• Strong organizational, analytical, documentation, and communication skills.
• Ability to work across technical, legal, compliance, and business teams.
• Experience with GRC platforms, regulatory tracking tools, or compliance repositories is a plus.
• Demonstrated experience in an agile work environment possessing qualities such as a collaborative mindset, adaptability to change, and a proactive problem-solving approach.

PREFERRED QUALIFICATIONS 

• Detail-oriented with strong follow-through and documentation discipline.
• Interest in cybersecurity regulations, compliance, and governance.
• Professional certifications such as CISSP, CISM, CRISC, CISA, PMP, or similar. 

NON-STANDARD WORK SCHEDULE, TRAVEL OR ENVIRONMENT REQUIREMENTS

• Travel as required by the business (less than 20% domestic and/or international)

  
Work Location Assignment: Hybrid


Pfizer endeavors to make www.pfizer.com/careers accessible to all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process and/or interviewing, please email disabilityrecruitment@pfizer.com. This is to be used solely for accommodation requests with respect to the accessibility of our website, online application process and/or interviewing. Requests for any other reason will not be returned.



To learn more about acceptable and prohibited uses of AI during the recruitment process, please review our candidate AI-use guidelines available on Pfizer Careers.


Information & Business Tech