Pfizer Logo

Pfizer

Senior Manager, Threat Remediation

Posted 5 Days Ago
Be an Early Applicant
In-Office
Chortiatis
Senior level
In-Office
Chortiatis
Senior level
Lead end-to-end threat remediation across on-premises, cloud, and hybrid environments. Translate detection and test findings into prioritized remediation plans, partner with SOC and incident response, track CAPAs, define remediation KPIs, report to executives, support audits, and drive long-term cyber defense strategy.
The summary above was generated by AI
ROLE SUMMARY

Our Global Cyber Defense team is responsible for safeguarding Pfizer’s digital assets and infrastructure through proactive threat detection, response, and risk mitigation across on-premises, cloud, and hybrid environments.

The Senior Manager, Threat Remediation is responsible for owning and driving the end‑to‑end remediation of cybersecurity threats across the enterprise. This role sits at the intersection of threat detection, incident response, vulnerability management, offensive security and technology risk, ensuring that identified threats are prioritized, mitigated, and resolved in a timely, risk‑based, and compliant manner.

This role will work closely with the SOC, Cloud Services, Infrastructure, End User Computing, Engineering, GRC, Legal, Privacy, and Business stakeholders to reduce cyber risk and improve the organization’s overall security posture.

ROLE RESPONSIBILITIES
  • Own the threat remediation lifecycle, from intake of identified threats (incidents, alerts, vulnerabilities, control gaps) through containment, mitigation, and closure.

  • Translate threat intelligence, SOC findings, red team results, penetration tests, and vulnerability scans into actionable remediation plans.

  • Ensure remediation actions are risk‑based, prioritized, and aligned with business impact, regulatory exposure, and threat severity.

  • Partner with Incident Response and SOC teams during active incidents to ensure effective containment and eradication strategies.

  • Lead post‑incident remediation efforts, ensuring root cause analysis (RCA) is completed and systemic issues are addressed.

  • Track and validate completion of corrective and preventive actions (CAPAs) resulting from incidents.

  • Work with IT, engineering, and application owners to resolve vulnerabilities while respecting validated system change controls.

  • Ensure compensating controls are documented and approved where remediation is constrained due to regulatory or operational limitations.

  • Define and report on remediation KPIs and KRIs (e.g., mean time to remediate, overdue critical findings, repeat issues).

  • Provide executive‑level reporting on remediation status, risk reduction, and systemic weaknesses.

  • Support internal and external audits, regulatory inspections, and security assessments by demonstrating effective remediation governance.

  • Partner with detection, threat intelligence, and vulnerability teams to close gaps between detection and remediation.

  • Contribute to long‑term cyber defense strategy, including roadmap planning and technology selection.

BASIC QUALIFICATIONS
  • Bachelor’s degree in Computer Science, Information Security, Engineering, or a related technical discipline, or equivalent experience.

  • 7+ years of experience in cybersecurity, with hands-on involvement in remediation, vulnerability management, security engineering, or incident response.

  • Strong understanding of:

    • Threat actor tactics, techniques, and procedures (MITRE ATT&CK)

    • Incident response and containment strategies

    • Vulnerability management and remediation workflows

    • Cloud security (AWS, Azure, GCP)

    • Endpoint, network, identity, and application security

  • Familiarity with SOC tooling (SIEM, SOAR, EDR/XDR), vulnerability scanners, and ticketing/workflow systems.

  • Demonstrated experience in an agile work environment possessing qualities such as a collaborative mindset, adaptability to change, and a proactive problem-solving approach.

  • Leadership experience managing or mentoring analysts and engineers.

 

PREFERRED QUALIFICATIONS
  • Working knowledge of GxP, FDA 21 CFR Part 11, EMA, HIPAA, GDPR, and other relevant regulations.

  • Familiarity with security frameworks, risk management practices, and regulatory expectations relevant to pharmaceutical or life sciences organizations.

  • Professional certifications such as CISSP, CISM, GIAC, or equivalent credentials related to security operations or risk management.

  

Please apply by sending your CV and a motivational letter in English.

Work Location Assignment: Hybrid

Purpose 

Breakthroughs that change patients' lives... At Pfizer we are a patient centric company, guided by our four values: courage, joy, equity and excellence. Our breakthrough culture lends itself to our dedication to transforming millions of lives.  

Digital Transformation Strategy

One bold way we are achieving our purpose is through our company wide digital transformation strategy. We are leading the way in adopting new data, modelling and automated solutions to further digitize and accelerate drug discovery and development with the aim of enhancing health outcomes and the patient experience.

Flexibility  

We aim to create a trusting, flexible workplace culture which encourages employees to achieve work life harmony, attracts talent and enables everyone to be their best working self. Let’s start the conversation!  

Equal Employment Opportunity 

We believe that a diverse and inclusive workforce is crucial to building a successful business. As an employer, Pfizer is committed to celebrating this, in all its forms – allowing for us to be as diverse as the patients and communities we serve. Together, we continue to build a culture that encourages, supports and empowers our employees.

Disability Inclusion

Our mission is unleashing the power of all our people and we are proud to be a disability inclusive employer, ensuring equal employment opportunities for all candidates. We encourage you to put your best self forward with the knowledge and trust that we will make any reasonable adjustments to support your application and future career. Your journey with Pfizer starts here!

Pfizer endeavors to make www.pfizer.com/careers accessible to all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process and/or interviewing, please email [email protected]. This is to be used solely for accommodation requests with respect to the accessibility of our website, online application process and/or interviewing. Requests for any other reason will not be returned.

To learn more about acceptable and prohibited uses of AI during the recruitment process, please review our candidate AI-use guidelines available on Pfizer Careers.

Information & Business Tech

Similar Jobs at Pfizer

3 Days Ago
In-Office
Senior level
Senior level
Artificial Intelligence • Healthtech • Machine Learning • Natural Language Processing • Biotech • Pharmaceutical
Perform offensive security testing (penetration tests, adversary simulation, red/purple team exercises) across on‑prem, cloud, and hybrid environments. Identify, validate, document weaknesses with PoC evidence and remediation guidance. Collaborate with detection, engineering, and remediation teams, improve offensive tooling and playbooks, and maintain high-quality reporting aligned to regulatory and ethical standards.
Top Skills: BashCloud ServicesMitre Att&CkPowershellPython
3 Days Ago
In-Office
Junior
Junior
Artificial Intelligence • Healthtech • Machine Learning • Natural Language Processing • Biotech • Pharmaceutical
Support development and maintenance of cyber resilience procedures and playbooks; assist with incident simulations, recovery tests, and post‑incident reviews; identify critical systems and support resilience assessments; align to frameworks (e.g., NIST, ISO); maintain audit evidence; track risks, remediation, and metrics; prepare reports and dashboards for stakeholders.
Top Skills: GxpIso StandardsNist Csf
3 Days Ago
In-Office
Mid level
Mid level
Artificial Intelligence • Healthtech • Machine Learning • Natural Language Processing • Biotech • Pharmaceutical
Lead and coordinate threat remediation activities across SOC, incident response, vulnerability management, and engineering teams. Prioritize and track remediation, define mitigation plans, validate completion, escalate systemic risks, maintain reporting/metrics, and drive process improvements to reduce exposure and align with regulatory and business requirements.
Top Skills: Application SecurityAWSAzureEdr/XdrEndpoint SecurityGCPIdentity SecurityMitre Att&CkNetwork SecuritySIEMSoarTicketing SystemsVulnerability Scanners

What you need to know about the Bristol Tech Scene

Along with Gloucester, Swindon and Bath, Bristol is part of the "Silicon Gorge" tech hub, a region in the U.K. renowned for its high-tech and research-driven industries, with a particular emphasis on sustainability and reducing environmental impact. As the European Green Capital, Bristol is home to 25,000 cleantech companies, including Baker Hughes and unicorn Ovo Energy. The city has committed to achieving net-zero emissions within the next decade.

Sign up now Access later

Create Free Account

Please log in or sign up to report this job.

Create Free Account