Senior Manager, Cybersecurity Governance Risk and Compliance(GRC)
Pubblicato il 13-08-2026 - Alfasigma in Pomezia
Senior Manager, Cybersecurity Governance Risk and Compliance(GRC)
Alfasigma is a privately held global healthcare company founded over 75 years ago in Italy, where it remains headquartered today in Bologna and Milan. The Group operates in over 100 markets spanning Europe, North and South America, Asia, and Africa.
Over three years ago, we embarked on a transformative journey to become a truly global innovative healthcare company with a leading focus on Gastrointestinal (GI) health . We have experienced remarkable growth, nearly doubled our revenues, expanding geographically, and integrating several key acquisitions. We have also evolved our portfolio, expanded into rare and specialty segments, and strengthened our pipeline and people's capabilities.
But our journey is far from complete In fact, this is just the beginning of a bold new chapter in Alfasigma's history. We are committed to advancing innovation and leveraging our deep expertise to provide better health and a better quality of life for patients and consumers worldwide and expand our reach across diverse markets.
Scope of the role:
As Cybersecurity Governance Senior Manager, you willmaintainand evolveAlfasigma'sCyber Governance, Risk & Compliance (GRC) framework across the Group, supporting the CISO in steering cyber risk management, regulatory compliance (NIS2, GDPR,GxP) and security maturity. A senior, high-visibility role spanning cyber risk assessment, ISO/IEC 27001 and NIST CSF, third-party risk, OT risk governance, AI Act and security awareness in a global, regulated pharmaceutical environment.
Your role:
Maintain and evolve the Group's Cyber Governance, Risk & Compliance framework (ISO/IEC 27001, NIST CSF, NIS2).
Support the CISO in reporting cyber risk to committees and top management, translating technical risk into business priorities.
Steer NIS2, GDPR andGxP-related compliance across all Group companies and coordinate remediation plans.
Lead enterprise cyber risk assessments and third-party / su