BISO - RDU

Description

Posted date Jun. 27, 2026 Contract type Full time Job ID R\-254729 **Why choose AstraZeneca Spain?** --------------------------------- AstraZeneca Spain is a rising force in our global business. With headquarters in Madrid and our global hub in Barcelona, we’ve become an important international centre of excellence in the fight against critical disease. Boasting vibrant universities and business schools, the Barcelona ecosystem is a place where scientists can thrive. We attract a diverse workforce from across the globe, shining a beacon for innovation in a country that’s committed to clinical development. We invite you to bring your talents to Barcelona where our respiratory medicine R\&D and Global Marketing centre offers opportunities in R\&D, IT, Commercial and HR. Or join us in Madrid and shape our growth in our BUs (Respiratory, Oncology \& CVRM ), and a range of Corporate functions. Additionally, you can find sales roles throughout the country. Together, we’re contributing to a world\-leading pipeline of therapeutics and delivering life\-changing medicines to patients. **Who do we look for?** ----------------------- Calling all tech innovators, ownership takers, challenge seekers and proactive collaborators. At AstraZeneca Spain, breakthroughs born in the lab become transformative medicine for the world's most complex diseases. Alongside technical expertise, colleagues have the resilience, energy and collaborative mindset to change lanes, work with different teams and start projects from scratch. Here, diverse minds and bold disruptors can meaningfully impact the future of healthcare using cutting\-edge technology. Whether you join us in Madrid or Barcelona, you can make a tangible impact within a global biopharmaceutical company that invests in your future. Join a talented global team that's powering AstraZeneca to better serve patients every day. **Success Profile** ------------------- Ready to make an impact in your career? If you're passionate, growth\-orientated and a true team player, we'll help you succeed. Here are some of the skills and capabilities we look for. ### **Diverse collaborators** This is a speak\-up culture that values collaboration. You’ll proactively bring your unique perspectives, experiences and skills to the table and seek the same from others. With our international team composition and the need for fast\-paced collaboration, you’ll always be building new connections with colleagues. ### **Cutting\-edge innovators** When you join us, you’ll be part of a team that embraces digital technology and data to transform the way we work and the work we do. Every day, you’ll help make history, empowered to ignite your creativity and build something enduring. ### **Resilient trailblazers** Here, the answers aren’t always available. So, you’ll need to bring a fearless, self\-starter mindset to navigate uncharted territories. You’ll harness your ceaseless energy to discover and make the necessary connections with colleagues to shape the future and achieve maximum impact. ### **Agile movers** Seize ownership and excel with autonomy to enjoy the constant rush of ground\-breaking discovery. Your ability to anticipate sudden shifts and adapt swiftly will prove critical as you make your mark in an environment that rewards initiative and resilience. **Responsibilities** -------------------- **Job ID** R\-254729 **Date posted** 06/27/2026 **BISO – Rare Disease Unit (RDU)** **Summary** Serve as the primary strategic cybersecurity partner to the Rare Disease Unit (RDU) IT organization and associated business areas, representing the CISO by leading cybersecurity engagement, alignment, and delivery of cybersecurity risk and resilience outcomes across AstraZeneca’s rare disease research, clinical development, regulatory, and commercial activities. This customer\-facing role will be closely coupled with the RDU IT leadership team and operate as a dotted\-line function to the RDU IT VP, supporting the science, technology, and data capabilities that underpin discovery research, translational science, clinical trials, and patient\-centered therapy development for rare diseases. The role provides strategic guidance on cybersecurity risks, priorities, and long\-term security posture across the rare disease therapeutic lifecycle and associated technology estate, including research and laboratory informatics, clinical trial systems, electronic data capture, clinical data management, regulatory submission platforms, scientific computing environments, bioinformatics and genomics platforms, real\-world data assets, and patient registries. A central focus is enabling RDU to adopt and scale secure\-by\-design, secure\-by\-default, and policy\-aligned scientific and operational practices while maintaining research velocity, data integrity, system validation, patient safety, and compliance with AstraZeneca’s Security Policy Framework and applicable regulatory obligations (including GxP, GMP, GLP, GCP, 21 CFR Part 11, HIPAA, and GDPR). This leader will direct a dedicated team with functional areas including cybersecurity posture reporting and data analysis, risk management and remediation, and security consulting—specifically tailored to the rare disease research, clinical, and commercial functions described. The role will help shape secure scientific and clinical technology patterns, strengthen cyber governance for research, clinical, and regulatory technology decisions, and drive adoption of enterprise security services and controls across the rare disease portfolio. **Job Description** The Rare Disease Unit Cybersecurity Business Information Security Officer (BISO) will lead a team of senior security specialists and analysts in a business\-facing organization. The focus of this team will be embedding risk awareness, risk reduction, and resilience improvement initiatives into the RDU research, clinical, regulatory, and commercial teams while preserving the research agility and patient focus that define the rare disease mission. This leader and team will be measured by metrics that indicate RDU progress toward risk ownership and accountability, specifically via data showing reduced risk and improved resilience to cyberattacks. The position is a dedicated cybersecurity resource assigned to the RDU IT leadership team and aligns the global Security Policy Framework to RDU business functions. Working directly for the Global Head of Cybersecurity Business Operations, the role is responsible for overseeing the internal information security needs of RDU business functions and providing leadership and support for cyber risk management, policy development, regulatory and validated\-systems compliance, third\-party assurance, data privacy, and cybersecurity operations as they relate to discovery research, translational science, clinical operations, clinical data management, regulatory affairs, lab informatics, bioinformatics, real\-world evidence, and patient\-facing digital capabilities. **Typical Accountabilities** * **Strategic partnership and governance:** Act as the primary strategic partner and security consultant to RDU IT and business leadership, driving alignment between rare disease research and commercial priorities, regulatory expectations, and the enterprise cybersecurity strategy. Chair or participate in relevant governance forums, ensuring risk\-based decision\-making, clear accountability, and visibility of cybersecurity outcomes across research, clinical, regulatory, and commercial portfolios. * **Regulatory compliance and validated systems:** Provide cybersecurity leadership across regulated environments, ensuring that security controls, change management, and operational practices align with GxP, GMP, GLP, GCP, 21 CFR Part 11, and other applicable regulatory expectations (FDA, EMA, MHRA, PMDA). Partner with Quality, Validation, and Regulatory Affairs to integrate cybersecurity considerations into computer system validation, periodic review, and audit\-readiness activities for systems supporting rare disease research, clinical development, and submissions. * **Clinical trial and research data security:** Guide the security of clinical trial and research data across its lifecycle, including electronic data capture (EDC), clinical trial management systems (CTMS), electronic trial master file (eTMF), randomization and trial supply management, central laboratory data flows, and clinical data management platforms. Ensure protection of patient\-identifiable information, study integrity, and trial data provenance from collection through regulatory submission and archival. * **Lab informatics and scientific computing security:** Provide cybersecurity guidance for laboratory and scientific computing environments, including laboratory information management systems (LIMS), electronic lab notebooks (ELN), instrument connectivity, scientific data lakes, bioinformatics and genomics pipelines, and high\-performance computing platforms supporting discovery and translational research. Drive secure configuration, segmentation, identity governance, and data protection across these specialized environments. * **Patient data privacy and protection:** Champion the protection of patient and subject data across rare disease research, clinical trials, patient registries, real\-world data assets, and patient support programs. Partner with the Data Privacy Office and Legal to ensure controls align with HIPAA, GDPR, and other global privacy regimes; embed privacy\-by\-design principles into new initiatives; and govern pseudonymization, de\-identification, and re\-identification risk for sensitive datasets, including small\-population rare disease cohorts. * **Third\-party and external collaboration security:** Lead a practical approach to third\-party cybersecurity risk for the RDU’s extensive ecosystem of Contract Research Organizations (CROs), academic and consortium partners,