Director, Application Cloud Security

At the heart of Pfizer's Digital transformation sits Global Cloud Services, enabling modern cloud infrastructure and engineering capabilities that influence business outcomes and provide value to our business, shareholders, and patients every day.

We are seeking an experienced Director of Application Cloud Security, providing strategic and technical leadership for the design, implementation, and continuous improvement of enterprise application cloud security capabilities across the digital organization. This role is responsible for ensuring that the software, APIs, and digital products developed and operated across the enterprise are secure by design, resilient, and aligned with business and regulatory requirements within a highly regulated pharmaceutical environment. The Director partners closely with Digital, and governance teams to embed security throughout the software development lifecycle and enable secure innovation at scale.

• Lead the application cloud security function, defining strategy, priorities, and roadmaps for securing software, APIs, and digital products across cloud, web, mobile, and enterprise application domains.
• Design and maintain scalable application cloud security programs and secure development practices that support digital products, platforms, and global business operations while meeting regulatory and compliance obligations.
• Oversee the selection, deployment, and lifecycle management of application cloud security tooling (e.g., SAST, DAST, SCA, and API security), ensuring controls are effective, resilient, and consistently applied across the SDLC.
• Partner with Digital, Cloud Services, and Cyber Defense leadership to integrate security into product development, CI/CD pipelines, and modernization initiatives.
• Establish secure coding standards, reference architectures, and guardrails aligned to enterprise risk management and application cloud security frameworks (e.g., OWASP, NIST SSDF).
• Lead and develop high performing application cloud security teams, fostering strong technical depth, accountability, and continuous improvement.
• Provide executive level reporting and risk insights to Cyber Defense leadership on application risk posture, vulnerability trends, and remediation priorities.

• undefined
• Bachelor’s degree in Cloud Security, Cybersecurity, Computer Science, Information Systems, or related field
• 10+ years of progressive experience in cybersecurity and application cloud security, including building and leadership of enterprise scale application security programs and teams.
• 5+ years of leadership experience managing security teams or programs
• Demonstrated experience designing and operating application cloud security controls across cloud, web, mobile, API, and DevSecOps domains.
• Proven ability to translate application cloud security risk into clear technical and business outcomes for senior leadership.
• Strong background in governance, risk management, and compliance frameworks (ISO 27001, NIST, FDA regulations, GxP)
• Professional certifications: CISSP, CCNP, GIAC, or similar
• Familiarity with application cloud security frameworks and standards (e.g., OWASP ASVS/SAMM, NIST SSDF, Zero Trust architectures).
• Excellent strategic thinking
• Deeply analytical and credible
• Ability to challenge, influence, and support senior leadership
• Excellent communication and presentation skills
• Ability to bring structure to vaguely defined problems and solve them with creative yet pragmatic approaches
• Resourceful, self-motivated, and proactive – strong drive for excellence

Work Location Assignment: Hybrid

Purpose

Breakthroughs that change patients' lives... At Pfizer we are a patient centric company, guided by our four values: courage, joy, equity and excellence. Our breakthrough culture lends itself to our dedication to transforming millions of lives.

Digital Transformation Strategy

One bold way we are achieving our purpose is through our company wide digital transformation strategy. We are leading the way in adopting new data, modelling and automated solutions to further digitize and accelerate drug discovery and development with the aim of enhancing health outcomes and the patient experience.

Flexibility

We aim to create a trusting, flexible workplace culture which encourages employees to achieve work life harmony, attracts talent and enables everyone to be their best working self. Let’s start the conversation!