search Browse Jobs
BISO - Enabling Units IT SecurityAstraZeneca · US - Gaithersburg - MD
AstraZeneca logo

AstraZeneca

company page ↗ Visa Sponsoring Company

BISO - Enabling Units IT Security

✓ This company has sponsored visas before. The posting doesn't say so, but it's still worth applying.

🗓️ Posted 2026-08-27 US - Gaithersburg - MD Full-time Hybrid ICT
💰 Salary 15,913 GBP–23,870 GBP/mo (190,957 GBP–286,435 GBP/yr) 📊 Market 10,000 GBP–16,667 GBP/mo

About the Company

The BISO Enabling Units IT Security serves as the Information Security Officer for the Enabling Units IT organization. This position reports to the AstraZeneca Global Head of Cybersecurity Business Operations. The BISO delivers risk management and security expertise to educate, enable, and empower Enabling Units IT and business stakeholders to safeguard information, platforms, and business-critical systems. The BISO team ensures information security is understood and embedded across enterprise business functions. The team leads security consultants and risk analysts responsible for embedding the security policy framework, industry-standard controls, and secure-by-design initiatives into enterprise SaaS platforms, cloud services, and applications supporting Finance, HR, Global Corporate Affairs, Global Business Services, Legal, and M&A functions. The BISO, is the primary strategic cybersecurity partner to Enabling Units IT, covering enterprise business functions including Finance, HR, Global Corporate Affairs, Global Business Services, Legal, and Mergers & Acquisitions. This customer-facing role represents the CISO by leading cybersecurity engagement, alignment, and delivery of cybersecurity risk and resilience outcomes across enterprise business applications and services.

About the Role

g-term security posture across enterprise SaaS platforms, cloud services, and applications such as Workday, SAP, Coupa, and Concur. A central focus is balancing business enablement with compliance, data protection, identity governance, vendor assurance, and resilience needs across enterprise functions. This leader directs cybersecurity consulting, risk management, remediation, posture reporting, and data analysis activities tailored to the enterprise SaaS and cloud platforms that underpin financial integrity, employee data protection, legal obligations, M&A activity, and critical business operations. Accountabilities Act as the primary strategic partner and security consultant to Enabling Units IT leadership, participating in governance forums that drive risk-based decisions, clear accountability, and visible security outcomes. Lead risk posture and architecture engagement for enterprise SaaS and cloud environments, supporting cybersecurity architects in defining cloud-native security patterns that fit business application needs. Lead security consulting and risk management for enterprise applications such as Workday, SAP, Coupa, and Concur, including identity and access management, data protection, integration security, privileged access governance, and vendor assurance. Ensure security controls support financial controls, SOX compliance, data privacy obligations including GDPR, M&A due diligence requirements, and electronic records/signatures expectations whe

Requirements

  • ● + years of experience in information security positions, including 5+ years overseeing an information security function and influencing senior business and IT stakeholders.
  • ● Demonstrated experience securing enterprise business applications, SaaS platforms, and cloud services, with the ability to translate business realities into effective cybersecurity controls.
  • ● Strong familiarity with financial controls and SOX compliance, data privacy regulations including GDPR, electronic records/signatures regulations, and M&A due diligence requirements.
  • ● Proven ability to design and operationalize cloud-native security patterns for enterprise SaaS platforms and business applications.
  • ● Hands-on experience securing enterprise SaaS and cloud platforms, including identity and access management, data protection, integration security, privileged access governance, and vendor risk management.
  • ● Working knowledge of enterprise security frameworks such as NIST CSF, ISO 27001/27002, and CIS Controls, with the ability to apply appropriate controls across business application environments.
  • ● Understanding of global incident response processes with experience adapting containment and recovery approaches to business continuity requirements such as financial close, payroll, procurement, legal workflows, and employee data protection.
  • ● M&A security experience, including cybersecurity due diligence, integration security planning, and post-merger technology risk management, is highly desirable.
  • ● Demonstrated ability to apply emerging technologies, including AI and automation, to improve cybersecurity and business outcomes while protecting sensitive data and maintaining human oversight.
  • ● Strong written and verbal communication skills, with the ability to present complex technical information to finance executives, HR leadership, legal counsel, business service leaders, and global IT.
  • ● Proven ability to manage competing priorities and drive outcomes across enterprise functions with different risk profiles, regulatory obligations, and operational constraints.
  • ● Executive presence and influence, with the ability to build trusted relationships and guide risk-based decision-making across Enabling Units IT and business leadership.
  • ● Bachelor's degree in science or relevant technical field of study; Master's preferred.
  • ● When we put unexpected teams in the same room, we unleash bold thinking with the power to encourage life-changing medicines. In-person working gives us the platform we need to connect, work at pace and challenge perceptions. That's why we work, on average, a minimum of three days per week from the office. But that doesn't mean we're not flexible. We balance the expectation of being in the office while respecting individual flexibility. Join us in our unique and ambitious world.
  • ● The annual base pay for this position ranges from 190,956.80 - 286,435.20 USD Annual. Hourly and salaried non-exempt employees will also be paid overtime pay when working qualifying overtime hours. Base pay offered may vary depending on multiple individualized factors, including market location, job-related knowledge, skills, and experience. In addition, our positions offer a short-term incentive bonus opportunity; eligibility to participate in our equity-based long-term incentive program (salaried roles), to receive a retirement contribution (hourly roles), and commission payment eligibility (sales roles). Benefits offered included a qualified retirement program 401(k) plan ; paid vacation and holidays; paid leaves; and, health benefits including medical, prescription drug, dental, and vision coverage in accordance with the terms and conditions of the applicable plans. Additional details of participation in these benefit plans will be provided if an employee receives an offer of employment. If hired, employee will be in an "at-will position" and the Company reserves the right to modify base pay (as well as any other discretionary payment or compensation program) at any time, including for reasons related to individual performance, Company or individual department/team performance, and market factors.
  • ● Date Posted 26-Aug-2026
  • ● Closing Date 10-Sept-2026 Our mission is to build an inclusive environment where equal employment opportunities are available to all applicants and employees. In furtherance of that mission, we welcome and consider applications from all qualified candidates, regardless of their protected characteristics. If you have a disability or special need that requires accommodation, please complete the corresponding section in the application form.