Director, Application Cloud Security

Job description

ROLE SUMMARY At the heart of Pfizer's Digital transformation sits Global Cloud Services, enabling modern cloud infrastructure and engineering capabilities that influence business outcomes and provide value to our business, shareholders, and patients every day. We are seeking an experienced Director of Application Cloud Security, providing strategic and technical leadership for the design, implementation, and continuous improvement of enterprise application cloud security capabilities across the digital organization. This role is responsible for ensuring that the software, APIs, and digital products developed and operated across the enterprise are secure by design, resilient, and aligned with business and regulatory requirements within a highly regulated pharmaceutical environment. The Director partners closely with Digital, and governance teams to embed security throughout the software development lifecycle and enable secure innovation at scale. ROLE RESPONSIBILITIES ·       Lead the application cloud security function, defining strategy, priorities, and roadmaps for securing software, APIs, and digital products across cloud, web, mobile, and enterprise application domains. ·       Design and maintain scalable application cloud security programs and secure development practices that support digital products, platforms, and global business operations while meeting regulatory and compliance obligations. ·       Oversee the selection, deployment, and lifecycle management of application cloud security tooling (e.g., SAST, DAST, SCA, and API security), ensuring controls are effective, resilient, and consistently applied across the SDLC. ·       Partner with Digital, Cloud Services, and Cyber Defense leadership to integrate security into product development, CI/CD pipelines, and modernization initiatives. ·       Establish secure coding standards, reference architectures, and guardrails aligned to enterprise risk management and application cloud security frameworks (e.g., OWASP, NIST SSDF). ·       Lead and develop high performing application cloud security teams, fostering strong technical depth, accountability, and continuous improvement. ·       Provide executive level reporting and risk insights to Cyber Defense leadership on application risk posture, vulnerability trends, and remediation priorities. BASIC QUALIFICATIONS undefined Bachelor’s degree in Cloud Security, Cybersecurity, Computer Science, Information Systems, or related field 10+ years of progressive experience in cybersecurity and application cloud security, including building and leadership of enterprise scale application security programs and teams. 5+ years of leadership experience managing security teams or programs Demonstrated experience designing and operating application cloud security controls across cloud, web, mobile, API, and DevSecOps domains. Proven ability to translate application cloud security risk into clear technical and business outcomes for senior leadership. Strong background in governance, risk management, and compliance frameworks (ISO 27001, NIST, FDA regulations, GxP) PREFERRED QUALIFICATIONS Professional certifications: CISSP, CCNP, GIAC, or similar Familiarity with application cloud security frameworks and standards (e.g., OWASP ASVS/SAMM, NIST SSDF, Zero Trust architectures). Excellent strategic thinking Deeply analytical and credible Ability to challenge, influence, and support senior leadership Excellent communication and presentation skills Ability to bring structure to vaguely defined problems and solve them with creative yet pragmatic approaches Resourceful, self-motivated, and proactive – strong drive for excellence Work Location Assignment: Hybrid Purpose Breakthroughs that change patients' lives... At Pfizer we are a patient centric company, guided by our four values: courage, joy, equity and excellence. Our breakthrough culture lends itself to our dedication to transforming millions of lives. Digital Transformation Strategy One bold way we are achieving our purpose is through our company wide digital transformation strategy. We are leading the way in adopting new data, modelling and automated solutions to further digitize and accelerate drug discovery and development with the aim of enhancing health outcomes and the patient experience. Flexibility We aim to create a trusting, flexible workplace culture which encourages employees to achieve work life harmony, attracts talent and enables everyone to be their best working self. Let’s start the conversation! Equal Employment Opportunity We believe that a diverse and inclusive workforce is crucial to building a successful business. As an employer, Pfizer is committed to celebrating this, in all its forms – allowing for us to be as diverse as the patients and communities we serve. Together, we continue to build a culture that encourages, supports and empowers our employees. Disability Inclusion Our mission is unleashing the power of all our people and we are proud to be a disability inclusive employer, ensuring equal employment opportunities for all candidates. We encourage you to put your best self forward with the knowledge and trust that we will make any reasonable adjustments to support your application and future career. Your journey with Pfizer starts here! Pfizer endeavors to make www.pfizer.com/careers accessible to all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process and/or interviewing, please email disabilityrecruitment@pfizer.com. This is to be used solely for accommodation requests with respect to the accessibility of our website, online application process and/or interviewing. Requests for any other reason will not be returned. To learn more about acceptable and prohibited uses of AI during the recruitment process, please review our candidate AI-use guidelines available on Pfizer Careers. Information & Business Tech