This role pays less than
92%
of similar roles. Most pay
$159,000–$227,750
— the shaded band above.
At the midpoint, this role pays about
$132k
versus about
$193k
for comparable roles.
Based on 240 similar postings.
Employer
About Pfizer
Pfizer Inc. is one of the world''s largest biopharmaceutical companies, researching, developing, manufacturing, and marketing medicines and vaccines across multiple therapeutic areas including oncology, cardiology, and infectious diseases. Industry: Biopharmaceuticals
Pfizer currently has
27 open roles
on FindRole.
Listed pay typically runs
$106,000–$176,600
across 27 roles with salary data.
Manager, GRC Technology, Metrics, and Automation joins the Global Governance, Risk, and Compliance team to advance security and risk management outcomes through data, automation, and technical platforms. The role involves designing and governing data pipelines, reporting systems, and automated workflows while defining a technology roadmap for Cyber GRC tooling aligned with regulatory requirements. Key responsibilities include developing executive-level dashboards, establishing risk-aligned metrics like KPIs and KRIs, and identifying opportunities to reduce manual effort through workflow automation and evidence collection. The candidate will utilize tools such as ServiceNow GRC, Archer, Power BI, or Tableau to provide actionable insights. This position addresses the challenge of integrating security, privacy, and regulatory compliance into a complex, highly regulated environment by ensuring that all metrics and system outputs remain defensible and traceable during internal and external audits.
Execute the technology roadmap for Cyber GRC tooling aligned with risk priorities and regulatory requirements.
Partner with IT teams to manage system upgrades, integrations, data feeds, and configuration enhancements.
Define and govern a comprehensive set of risk-aligned metrics, KPIs, and KRIs for the GRC environment.
Develop executive-level dashboards to provide actionable insights for senior leadership and governance forums.
Identify and implement automation opportunities to reduce manual effort and improve data quality across GRC processes.
Manage automated workflows including approvals, notifications, evidence collection, and reporting capabilities.
Align GRC data with enterprise standards by partnering with data and analytics teams for scalable reporting.
Support internal and external audits by ensuring all metrics and system outputs are defensible and traceable.
What we're looking for
Must have a bachelor's degree with 4 years experience, master's with 2 years, PhD, or associate's with 8 years, or high school with 10 years.
Must have at least 4 years of experience in information technology or cybersecurity.
Experience must include GRC platforms, reporting, and workflow automation.
Demonstrated ability to design metrics and dashboards that support executive decision-making.
Strong stakeholder management and communication skills, including executive-level presentations.
Experience operating in a highly regulated, matrixed enterprise environment.
Must have permanent work authorization in the United States.
Bachelor’s degree in IT or cybersecurity; experience in pharmaceuticals; professional certifications (CISSP, CISM, CRISC, CISA, PMP); and hands-on experience with ServiceNow GRC, Archer, Power BI, or Tableau (preferred).
GRC
CI/CD
Azure DevOps
ServiceNow
API
GitHub
Jenkins
Jira
Power Automate
Control-as-Code
Policy-as-Code
Cybersecurity
Information Security
Software Development
Scripting
AI Governance
NIST AI RMF
ISO/IEC 42001
EU AI Act
SOC 1
ISO 27001
ENS High
MS DPR
PCI-DSS
CSA STAR
HDS
Compliance-as-Code
Continuous Control Monitoring
Cyber Risk Management
Data Governance