Manager, Privileged Access Management (PAM)

ROLE SUMMARY Technology impacts everything we do. Pfizer’s digital and ‘data first’ strategy focuses on implementing impactful and innovative technology solutions across all functions from research to manufacturing. Whether you are digitizing drug discovery and development, identifying solutions, or making our work easier and faster, you will be making a difference to countless lives. Pfizer’s CISO organization delivers proactive cyber defense for Pfizer global enterprise. Our mission is to secure all of Pfizer’s digital information assets ranging from our scientific breakthroughs to the manufacturing floor, and out to the patients we serve. We achieve this mission through a combination of world-class talent, top-tier technologies, industry leading best practices, and the promotion of a cybersecurity ownership culture across the company. Strong identity and privileged access controls are vital to Pfizer’s cybersecurity posture and operational resilience. The Manager, Privileged Access Management (PAM), is responsible for supporting the strategy, delivery, and ongoing management of enterprise PAM technologies across Pfizer Digital. This role drives innovation to reduce privileged access risk, strengthen least-privilege controls, and improve the user experience across enterprise, cloud, application, and machine-to-machine environments. This is a hands-on technical role responsible for modernizing and operating privileged access capabilities that support evolving business and security

requirements. The role will help advance Pfizer’s PAM services across privileged user access, service accounts, machine identities, API secrets, cloud controls, session management, credential rotation, and break-glass access while ensuring the platform remains secure, scalable, reliable, and easy to use. The Manager will support enhancements, continuous improvement initiatives, and the work activities of technical resources supporting PAM services.

Responsibilities include oversight of contingent workers,

requirements definition, solution design, technical specification, development, testing, implementation support, and break/fix activities for PAM platforms and related services. This role interprets internal and external business challenges, applies industry best practices, and recommends improvements to products, processes, services, and controls. ROLE

RESPONSIBILITIES Support the management of enterprise Privileged Access Management services, helping ensure platform reliability, security, scalability, and compliance. Develop, deploy, and maintain PAM solutions that meet business, technical, cybersecurity, and regulatory

requirements. Work independently on well-defined tasks and escalate ambiguous or cross-team issues to senior leadership as needed. Support the integration of applications, infrastructure targets, service accounts, and secrets into PAM services, including upgrades and ongoing lifecycle support. Coordinate the day-to-day work of technical resources, including contingent staff, supporting enhancements and service improvements. Partner with service owners, application teams, cloud teams, and cybersecurity stakeholders to help translate business needs into secure and scalable PAM solutions. Maintain service patterns, technical workflows, architecture diagrams, implementation documentation, and operational runbooks. Build and maintain automation using APIs, scripting, and industry-standard PAM technologies to improve efficiency and user experience. Develop and maintain Infrastructure as Code solutions, including Terraform, to support cloud infrastructure automation. Follow code quality, security, and maintainability standards, including participating in reviews, documentation, and testing. Execute unit, smoke, functional, and regression testing to support reliable code deployment. Identify and support continuous improvement opportunities that reduce manual work, strengthen controls, and improve service reliability. Support business-as-usual operations, including service health monitoring, planned maintenance, and escalation support as needed. Assist in managing incidents, problems, and service risks using ITIL-aligned practices, including root cause analysis and remediation support. Communicate clearly with technical and non-technical stakeholders and contribute to mentoring junior team members.

QUALIFICATIONS Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, Engineering, or a related discipline. 4+ years of experience in IT, identity and access management, cybersecurity, infrastructure, or related enterprise technology roles; or a Master's degree and 2+ years of related experience; or a PhD and 0+ years of related experience; or an Associate's degree and 8+ years of related experience; or a High School diploma (or equivalent) and 10+ years of related experience. 2+ years of hands-on experience with privileged access management in large, complex enterprise environments. Proven experience leading technical teams, managing cross-functional initiatives, engaging senior stakeholders, and overseeing external service providers or contingent resources. Extensive experience designing, implementing, integrating, and operating PAM platforms such as CyberArk, BeyondTrust, Delinea/Thycotic, or similar technologies. Strong understanding of related security capabilities, including IAM, MFA, SSO, secrets management, credential rotation, session management, least privilege, and threat detection. Experience integrating PAM solutions across cloud, on-premises, IaaS, SaaS, Windows, Linux, database, network, and application environments, including Azure and AWS. Experience working in Agile environments and using Agile delivery tools, with a collaborative mindset, adaptability to change, and a proactive approach to problem solving. Experience using automation tools, APIs, and scripting languages such as PowerShell or Python to streamline privileged access processes and improve operational efficiency. Understanding of regulatory

requirements, audit expectations, and industry standards related to cybersecurity, data protection, privacy, and access controls, including SOX, HIPAA, GDPR, and CCPA. Proven experience in developing, implementing, and enforcing security policies and procedures to ensure compliance with applicable laws and regulations. Demonstrated ability to develop and execute PAM strategies and roadmaps aligned to organizational goals, risk reduction priorities, and industry best practices. Excellent verbal and written communication skills, with the ability to explain complex technical concepts to senior leaders, business stakeholders, and non-technical audiences. Strong analytical and problem-solving skills, with a proactive approach to identifying and addressing security risks and operational challenges. Ability to collaborate across departments and teams while fostering a culture of security awareness, accountability, and continuous improvement. Demonstrated experience in an agile work environment possessing qualities such as a collaborative mindset, adaptability to change, and a proactive problem-solving approach.

QUALIFICATIONS Master’s degree in relevant discipline. Deep expertise in Microsoft solutions is highly desirable. PHYSICAL/MENTAL

REQUIREMENTS Applicants should be capable of working through a personal laptop computer or mobile device for extended periods. NON-STANDARD WORK SCHEDULE, TRAVEL OR ENVIRONMENT

REQUIREMENTS Periodic international and domestic travel required (less than 10%) OTHER JOB DETAILS Last Day to Apply: August 13, 2026 Work Location Assignment: Hybrid, 2-3 days onsite/week, US Digital Pfizer site required (LIFYD Policy) The annual base salary for this position ranges from $106,000.00 to $176,600.00.* In addition, this position is eligible for participation in Pfizer’s Global Performance Plan with a bonus target of 15.0% of the base salary and eligibility to participate in our share based long term incentive program. We offer comprehensive and generous

benefits and programs to help our colleagues lead healthy lives and to support each of life’s moments.

Benefits offered include a 401(k) plan with Pfizer Matching Contributions and an additional Pfizer Retirement Savings Contribution, paid vacation, holiday and personal days, paid caregiver/parental and medical leave, and health

benefits to include medical, prescription drug, dental and vision coverage. Learn more at Pfizer Candidate Site – U.S.

Benefits | (uscandidates.mypfizerbenefits.com). Pfizer

compensation structures and benefit packages are aligned based on the location of hire. The United States salary range provided does not apply to Tampa, FL or any location outside of the United States. * The annual base salary for this position in Tampa, FL ranges from $95,400.00 to $159,000.00. This role is posted in multiple locations. If you are applying for the role in an secondary job posting location where pay transparency regulations apply, your Talent Advisor will share the local pay information with you during the first interview. Relocation assistance may be available based on business needs and/or eligibility. Candidates must be authorized to be employed in the U.S. by any employer. U.S. work visa sponsorship (such as TN, O-1, H-1B, etc.) is not available for this role now or in the future. Sunshine Act Pfizer reports payments and other transfers of value to health care providers as required by federal and state transparency laws and implementing regulations. These laws and regulations require Pfizer to provide government agencies with information such as a health care provider’s name, address and the type of payments or other value received, generally for public disclosure. Subject to further legal review and statutory or regulatory clarification, which Pfizer intends to pursue, reimbursement of recruiting expenses for licensed physicians may constitute a reportable transfer of value under the federal transparency law commonly known as the Sunshine Act. Therefore, if you are a licensed physician who incurs recruiting expenses as a result of interviewing with Pfizer that we pay or reimburse, your name, address and the amount of payments made currently will be reported to the government. If you have questions regarding this matter, please do not hesitate to contact your Talent Acquisition representative. EEO & Employment Eligibility