Cyber Security Regulatory Compliance and Process Improvement Manager

Cyber Security Regulatory Compliance and Process Improvement Manager Macclesfield, UK (3 days on site per week)
About Astra Zeneca Astra Zeneca  is a global, science-led, patient-focused biopharmaceutical company that focuses on the discovery, development and commercialisation of prescription medicines for some of the world’s most serious diseases. But we’re more than one of the world’s leading pharmaceutical companies. At AstraZeneca, we are pioneering new frontiers by identifying and treating patients earlier, working towards the aim of eliminating cancer as a cause of death.

Come and join our AZ team where you will play a pivotal role in this exciting period of development!!

We are looking for an IT security professional who understands that security is a journey rather than a destination. Cybersecurity cannot be permanently “fixed”; instead, we must continually improve our processes, controls, and risk position against an evolving threat landscape. The successful candidate will understand that technology alone cannot solve cybersecurity challenges and that effective security depends on strong governance, collaboration, awareness, and sustainable ways of working.

As part of this capability, the role holder will help ensure that AstraZeneca’s information assets are adequately protected in relation to confidentiality, integrity, and availability. The role will support the implementation of cyber regulatory requirements, drive improvements to cybersecurity processes and controls, and help maintain a clear, business-connected IT security policy and compliance framework.

Key Responsibilities:

Regulatory Implementation and Monitoring:
Translate global, regional, and local cybersecurity regulations, standards, and supervisory expectations into practical business requirements, controls, processes, and implementation activities. Support monitoring of regulatory developments and communicate their implications to relevant collaborators.

Process Improvement and Control Uplift:
Find opportunities to improve cybersecurity processes, governance, controls, and ways of working. Drive practical and sustainable improvements through collaboration, analysis, clear documentation, and diligent follow-up.

Governance and Stakeholder Management:
Coordinate cybersecurity regulatory and compliance governance activities by preparing materials, gathering inputs, tracking actions, and providing clear updates on compliance posture, readiness, risks, and delivery status. Support governance forums and ensure decisions and actions are followed through to completion.

Policy and Compliance Framework:
Support the maintenance and continuous improvement of AstraZeneca’s IT security policy framework, regulatory compliance framework, and associated controls. Ensure that these remain aligned with regulatory expectations, internal risk management practices, and the organisation’s security objectives.

Training and Awareness:
Support the development and delivery of cybersecurity regulatory training and awareness activities for leadership teams and key business functions, including Manufacturing, Quality, Supply Chain, and R&D. Help collaborators understand their obligations and the practical implications of cybersecurity requirements.

Risk, Assurance, and Gap Assessment:
Conduct or support security assurance activities, risk assessments, regulatory gap assessments, and control reviews across functions, markets, and sites. Assess complex situations, balance strategic and tactical requirements, and support the identification and prioritisation of remediation activity.

Audit, Evidence, and Remediation:
Gather, review, organise, and maintain traceable and defensible compliance evidence for internal and external audits, assurance reviews,…