Manager, Security, Governance, Risk and Compliance
Jazz Pharmaceuticals
- Location
- US Home Based, PA
- Work model
- On-Site
- Level
- Senior
- Salary
- $134.4k – $201.6k/yr
- H-1B history
- 10 approvals (FY2023)
- Posted
- Aug 25, 2026
Skills
About this role
If you are a current Jazz employee please apply via the Internal Career site Jazz Pharmaceuticals is a global biopharma company whose purpose is to innovate to transform the lives of patients and their families. We are dedicated to developing life-changing medicines for people with serious diseases — often with limited or no therapeutic options. We have a diverse portfolio of marketed medicines, including leading therapies for sleep disorders and epilepsy, and a growing portfolio of cancer treatments. Our patient-focused and science-driven approach powers pioneering research and development advancements across our robust pipeline of innovative therapeutics in oncology and neuroscience. Jazz is headquartered in Dublin, Ireland with research and development laboratories, manufacturing facilities and employees in multiple countries committed to serving patients worldwide. Please visit www.jazzpharmaceuticals.com for more information.
Job Description
Job Responsibilities Program & Governance Leadership Coordinate, partner, and align security activities across security and IT teams supporting enterprise platforms and SaaS/PaaS environments. Support implementation and ongoing maintenance of SaaS security governance processes aligned with internal policies, regulatory requirements, and industry standards. Coordinate security initiatives across core platforms and provide status reporting, issue tracking, and risk visibility to leadership. Track and report key risk indicators (KRIs), metrics, and compliance status to support decision-making and continuous improvement. Control Management & Compliance Operations Help define, implement, and maintain security baselines, standards, and control frameworks for SaaS and PaaS solutions. Support control lifecycle management, including control definition, documentation, and validation. Assist in mapping controls to applicable frameworks (e.g., NIST, ISO 27001, OWASP) and support consistent implementation. Support internal and external audits by ensuring audit readiness and evidence collection. Help coordinate and support security assessments, testing activities, and risk evaluations. Risk & Exception Management Coordinate activities within the security exception process, including risk documentation, stakeholder engagement, approval tracking, and remediation follow-up. Monitor exception trends related to SaaS and PaaS workloads. SaaS Security & Platform Governance Help coordinate security governance for critical platforms including Workday, Salesforce, Snowflake, ServiceNow, and Microsoft 365. Support implementation and ongoing maintenance of approved security baselines for new and existing platform implementations. Coordinate continuous control monitoring activities and assist in identifying configuration drift or compliance gaps. Partner with platform owners to integrate security into configuration, change, and release management processes. Stakeholder Engagement & Enablement Partner with business stakeholders to influence secure adoption and improve operational security maturity. Collaborate with IAM and data governance teams to ensure strong access controls, RBAC models, and data protection practices across SaaS platforms. Act as a liaison between security, compliance, IT, and business teams to support alignment, communication, and issue resolution. Third-Party Risk & Vendor Security Coordinate with business stakeholders and vendors to ensure SaaS and PaaS solutions complete the SGRC Vendor Risk Management process and maintain required assessments. Required Knowledge, Skills, and Abilities Experience in security program management, cloud security, SaaS governance, and SGRC functions. Strong knowledge of security frameworks (e.g., NIST, ISO 27001, OWASP). Demonstrated ability to operationalize policies into effective technical and procedural controls. Ability to influence cross-functional teams and effectively communicate risk to stakeholders at multiple levels. Familiarity with enterprise