Security Risk and Audit Specialist - RDT Information Security

Position Job Description

At Roche, protecting our critical information assets and systems is foundational to delivering life‑changing medicines. As the IT Security Risk & Audit Specialist, you will manage and coordinate the end‑to‑end security risk lifecycle, bridging the gap between technical security engineering and executive risk posture to ensure our global systems and third‑party ecosystems remain resilient against evolving threats.

Responsibilities

• Risk Assessment: Support comprehensive security risk assessments and audits using frameworks such as NIST CSF and ISO 27001 to identify vulnerabilities in systems, cloud services, and emerging technologies.
• Third‑Party Cyber Risk Management: Execute security, privacy, and quality evaluations of global vendors, focusing on supply‑chain integrity, data sovereignty, and breach notification capabilities; follow up with vendors on open findings and remediation status.
• ...