​​Senior Manager, AI Data Access Lead

Role Summary

Pfizer Global Supply (PGS) is transforming how data powers its end-to-end supply network.  

The Senior Manager, Data Security Lead will lead the design and evolution of data security frameworks across Pfizer Global Supply data platforms and data products. The role will establish a consistent, scalable approach for protecting structured, semi-structured, and unstructured data residing in enterprise data lakes, data warehouses, cloud platforms, and other authorized data sources. The incumbent will define how access is designed, governed, approved, implemented, and monitored, including role-based and attribute-based access, row-level security, column-level security and masking, sensitive-data classification, entitlement models, policy-driven access, and governed self-service access. The role will define architecture and integration patterns that separate business policy and entitlement management from the physical datasets and platforms where data resides, enabling consistent enforcement across Snowflake and other enterprise data sources. This global role partners with PGS Governance, Enterprise Cybersecurity, Privacy, Digital platform teams, data owners, data stewards, and solution teams. 

Role Responsibilities

• Develop and maintain the PGS data security architecture, principles, standards, reference patterns, and target-state roadmap across data lakes, data warehouses, cloud platforms, data products, semantic layers, knowledge platforms, and artificial intelligence environments.

• Define scalable role-based access control, attribute-based access control, least-privilege, segregation-of-duties, policy-based access, and entitlement models that can be applied consistently across Snowflake and heterogeneous enterprise data platforms.

• Establish design patterns and decision criteria for row-level security, column-level security, static and dynamic masking, tokenization, de-identification, object permissions, tag-based controls, secure views, and governed data sharing.

• Design integration patterns connecting centralized policy, identity, catalog, and entitlement-management capabilities with underlying datasets and platforms, while minimizing duplicated and platform-specific security roles.

• Lead the design of data classification, security metadata, policy domains, access-governance workflows, certification controls, approval processes, periodic reviews, recertification, exceptions, and revocation within Collibra.

• Provide security architecture leadership for Snowflake, including role hierarchies, row access policies, masking policies, tags, secure views, object permissions, and secure data sharing, in partnership with Digital and platform engineering teams responsible for implementation and operations.

• Embed security-by-design requirements into dataset onboarding, data-product delivery, analytics, data science, generative artificial intelligence, semantic models, vector stores, knowledge graphs, and agent-based capabilities.

• Translate enterprise security, privacy, data governance, records-management, and regulatory requirements into practical standards and reusable controls; lead cross-functional design reviews, monitor conformance, support audit readiness, manage exceptions, and communicate risk and outcomes to senior stakeholders.

Basic Qualifications

• Applicant must have a bachelor’s degree in computer science, information systems, cybersecurity, data engineering, engineering, or a related field with at least 6 years of experience in enterprise data security, information security architecture, data architecture, data governance, cloud data platforms, or a related discipline; OR a master’s degree with at least 5 years of experience, OR a PhD with at least 1 year of experience
• Demonstrated leadership of complex cross-functional initiatives and experience designing security approaches for enterprise data lakes, data warehouses, and modern cloud data platforms.
• Strong knowledge of role-based access control, attribute-based access control, entitlement design, least-privilege access, segregation of duties, row-level security, column-level security, dynamic data masking, data classification, and policy enforcement.
• Experience designing approaches that separate policy and entitlement administration from the physical location of underlying datasets.
• Experience with Snowflake or a comparable modern cloud data platform and the ability to translate securi…