Product Security and Privacy Network Lead

At Roche you can show up as yourself, embraced for the unique qualities you bring. Our culture encourages personal expression, open dialogue, and genuine connections, where you are valued, accepted and respected for who you are, allowing you to thrive both personally and professionally. This is how we aim to prevent, stop and cure diseases and ensure everyone has access to healthcare today and for generations to come. Join Roche, where every voice matters.

The Position

Position Overview

The PSPO RIS Network Lead serves as the primary strategic interface and business partner connecting Roche Information Solutions (RIS) leadership teams with the Product Security and Privacy Organization (PSPO). Embedded within a Scaled Agile Framework (SAFe) culture, the Network Lead translates business strategies, customer needs, and product roadmaps into clear, prioritized cybersecurity and privacy requirements for PSPO experts and squads.

Combining strong risk management expertise with business partner capabilities, the Network Lead collaborates with Customer Area (CA) Leadership Teams, Lifecycle Teams (LCTs), and global stakeholders to ensure digital solutions are secure, compliant, and positioned for long-term commercial success.

Key Responsibilities

• Strategic Portfolio Alignment & Interface: Act as the central interface across RIS Customer Areas (CAs), Lifecycle Teams (LCTs), and Global Functions (R&D, ATSO, Q&R) to align cybersecurity and privacy roadmaps with business objectives.
• Risk-Informed Business Decision Making: Conduct strategic portfolio reviews with RIS management teams, translating cybersecurity and privacy exposures into tangible business risks and value propositions to facilitate decision-making by Business Risk Owners and Senior Leadership.
• Backlog & Resource Prioritization: Partner with PSPO Chapters, Network Leads, and Squads within the SAFe ecosystem to prioritize backlogs, aggregate demand, and balance capacity against business critical priorities.
• Harmonization & Standard Adoption: Drive the seamless adoption of cybersecurity and privacy standards across the RIS diagnostics portfolio, eliminating operational silos and resolving escalations, dependencies, or delivery bottlenecks.
• Governance & Value Proposition: Define mid- to long-term security roadmaps in tandem with Customer Areas, establishing clear visibility into progress, risk posture, and investment needs.

Requirements & Experience

• Education: Bachelor’s degree in Information Security, Computer Science, Business Administration, or a related discipline (Master’s degree preferred).
• Experience: 6+ years in cybersecurity/privacy program management, risk management, or strategic IT business relationship management within global, fast-paced environments.
• Risk Management Expertise: Solid core background in cybersecurity and privacy risk concepts, enabling fluent engagement with technical experts and effective risk communication to business leaders.
• Agile & Matrix Leadership: Proven track record leading in complex, highly matrixed organizations under Scaled Agile (SAFe) or Agile frameworks, managing stakeholder alignment across CAs, LCTs, and Chapter networks.
• Stakeholder Influence & Business Acumen: Superior executive communication, negotiation, and strategic presentation skills, with a demonstrated ability to influence Senior Management and Business Risk Owners.
• Industry Background: Preferred experience in medical devices, digital healthcare solutions, diagnostics, or software development environments.

Preferred Qualifications & Certifications

• Certifications such as CISA, CISM, CRISC, CISSP, SAFe Agilist, or equivalent management/security credentials.
• Proven capacity to act as an organizational "integrator", bridging technical security capabilities with commercial/business drivers.
• A solution-oriented mindset with high comfort navigating ambiguity and matrixed decision-making structures.

Where pay transparency applies, details are provided based on the primary posting location. For this role, the primary location is Sant Cugat del Vallès. If you are interested in additional locations where the role may be available, we will provide the relevant compensation details later in the hiring process.

Who we are

A healthier future drives us to innovate. Together, more than 100’000 employees across the globe are dedicated to advance science, ensuring everyone has access to healthcare today and for generations to come. Our efforts result in more than 26 million people treated with our medicines and over 30 billion tests conducted using our Diagnostics products. We empower each other to explore new possibilities, foster creativity, and keep our ambitions high, so we can deliver life-changing healthcare solutions that make a global impact.

Let’s build a healthier future, together.

Roche is an Equal Opportunity Employer.