Lead complex technical risk assessments, drive remediation, and represent the risk program to senior leadership and audit forums.
Responsibilities
Independently lead complex, ambiguous, or cross-functional technical risk assessments with minimal oversight
Serve as a trusted advisor to senior technical leaders and executives on risk posture, prioritization, and tradeoffs
Develop and deliver executive-level risk reporting, metrics, and trend analysis
Own escalation and negotiation on high-risk exception requests and complex remediation disputes
Monitor the risk portfolio at program level, identify systemic gaps or patterns across the register, and drive process, tooling, or automation improvements
A technical leadership role focused on product security, regulatory readiness (EU Cyber Resilience Act, AI Act), and engineering controls for compliance.
Compensation
The starting salary range posted for this position is $151,600.00 to $222,400.00 and reflects the projected salary range for new hires in this position in U.S. and/or Canada locations, not including incentive compensation*, equity, or benefits.
Responsibilities
Lead Cyber Resilience Act readiness assessments and translate regulatory requirements into technical controls, implementation plans, and remediation priorities.
Build and improve security and compliance engineering capabilities, including automated evidence collection, control-as-code, dashboards, and continuous monitoring.
Assess sovereign cloud designs, AI capabilities, data flows, and third-party dependencies for security, privacy, and regulatory risks.
Support audits and risk reporting, and help engineers establish sustainable security and compliance practices.
Lead the development, governance, and continuous improvement of the European Business Management System, driving consistency, compliance, knowledge sharing, and operational excellence across multiple countries.
Responsibilities
Manage and develop the European BMS, including tools, templates, guidance, training materials, and document control.
Ensure key business processes are clearly documented and accessible.
Deliver monthly compliance and BMS KPI reporting to regional leadership.
Manage ISO certifications, external audits, and certification body relationships.
Capture lessons learned from projects, client feedback, audits, and reviews, and translate them into practical guidance.
Requirements
IRCA Certified Lead Auditor (ISO 9001, ISO 14001, or ISO 45001)
degree-level qualification in quality, business management, or a related discipline
Help Astellas use AI with confidence. As AI Security Risk Manager, you will assess the security risks of the AI tools Astellas builds and buys, from copilots and agents to AI-enabled vendor products, and give clear, practical recommendations so teams can move forward safely.
Responsibilities
Assess AI systems for AI-specific threats, such as prompt injection, jailbreaks, data poisoning, model theft, sensitive data leakage and agents acting beyond their intended authority, and evaluate attack surface and control effectiveness.
Provide the AI-specific security review within Astellas' third-party risk process: assess AI providers' controls and evidence, check alignment with Astellas AI security requirements, and advise on AI security terms in contracts.
Document findings and recommendations; assess residual risk and treatment options; facilitate risk acceptance decisions with system owners; track findings through remediation; and produce clear reports and executive summaries.
Assess alignment with NIST AI RMF, ISO 42001, OWASP Top 10 for LLMs, the EU AI Act and Astellas AI policies; support audits; and maintain the AI risk assessment method and procedures.
Shape how a global pharmaceutical company adopts AI safely. Set the security architecture, standards and guardrails for the AI systems Astellas uses and builds, leading the AI security program from build into day-to-day operation.
Responsibilities
Own the AI security architecture strategy and roadmap
Define AI security standards, guardrails and reference architectures for generative, agentic and RAG systems on Astellas' Microsoft-based AI platforms
Keep architecture aligned with enterprise security architecture and frameworks such as NIST AI RMF, OWASP Top 10 for LLMs, MITRE ATLAS, ISO 42001 and the EU AI Act
Lead security architecture reviews and threat modeling for new and high-risk AI solutions
Define design mitigations and set security requirements for the secure AI and agent development lifecycle
Information Security Analyst - GRCNewDefined.ai · Seattle, US+1 more
Security Governance & Compliance ManagerCisco · San Jose, Costa Rica
Security Engineering Technical Leader (Remote)Cisco · Remote, US
Senior Manager, Customer Trust EnablementHubSpot · Remote, US
Senior GRC LeadIntent HQ · London, United Kingdom
Third-Party Risk Management AnalystFireworks · San Mateo, US