Bei Roche kannst du ganz du selbst sein und wirst für deine einzigartigen Qualitäten geschätzt. Unsere Kultur fördert persönlichen Ausdruck, offenen Dialog und echte Verbindungen. Hier wirst du für das, was du bist, wertgeschätzt, akzeptiert und respektiert. Dies schafft ein Umfeld, in dem du sowohl persönlich als auch beruflich wachsen kannst. Gemeinsam wollen wir Krankheiten vorbeugen, stoppen und heilen und sicherstellen, dass jeder Zugang zur Gesundheitsversorgung hat – heute und in Zukunft. Werde Teil von Roche, wo jede Stimme zählt.
Die Position
Senior Cybersecurity Analyst - Policy Based Access
As part of Roche Digital Technology (RDT), our Identity and Access Management (IAM) team protects the organization’s global digital assets by developing and operating sophisticated security platforms. We work at the forefront of identity governance, fine-grained authorization, and hybrid cloud security to support users and business-critical systems in a highly regulated global healthcare ecosystem.
As aSenior Cybersecurity Analyst - Policy Based Access, you will be part of a global team responsible for the design, implementation, and lifecycle management of our Policy Based Access Control (PBAC) infrastructure. You will play a critical role in protecting our information and assets by moving beyond traditional access models toward a dynamic, fine-grained authorization framework that supports our global Zero Trust strategy. In this role, you will act as a trusted advisor to global application owners, ensuring that our security policies are scalable, resilient, and deployed seamlessly through automated code pipelines.
The Opportunity
- Architect PBAC Infrastructure: Serve as the technical owner of core PBAC components (PDP/PEP) across a hybrid global landscape, ensuring high availability and peak performance.
- Drive Strategic Implementation: Lead the enterprise transition from initial access use cases to global adoption, defining organization-wide standards for policy-based authorization.
- Consult on Integration Pathways: Act as the primary technical consultant for application and data owners, integrating critical systems via RESTful APIs, SQL/JDBC, and LDAP.
- Pioneer Policy as Code (PaC): Drive the shift to PaC by designing automated pipelines for versioning, testing, and deploying authorization logic like modern software.
- Manage Platform Lifecycles: Own the tactical lifecycle of the authorization platforms, including version upgrades, continuous performance tuning, and security patching.
- Lead Incident Analysis: Conduct deep-dive analytical investigations and root cause analysis into moderately complex cybersecurity incidents, threat patterns, and vulnerabilities.
- Streamline Asset Onboarding: Optimize and accelerate onboarding processes for new digital assets while ensuring strict alignment with international data privacy regulations like GDPR.
- Collaborate Across Product Squads: Partner closely with product managers, developers, and global stakeholders to build secure, user-friendly, and friction-free PBAC workflows.
Who you are
- Experienced Security Professional: You bring 4–9 years of professional experience in IT Security, including 3+ years specifically focused on IAM and PBAC/ABAC in large enterprise environments.
- Technical Security Master: You possess advanced, deep-level knowledge of XACML, decentralized policy management, and Zero Trust frameworks (RBAC and ABAC).
- Identity Foundations Expert: You are highly proficient in core identity standards, including SAML, OAuth, OIDC, Single Sign-On (SSO), and Identity Governance and Administration (IGA).
- DevOps& Integration Developer: You are skilled in Java or Python for custom integrations, with practical experience utilizing Git and CI/CD pipelines for secure code deployment.
- Educated Professional: You hold a Bachelor’s or Advanced degree in Computer Science, Cyber Security, Information Technology, or a related field (or equivalent professional experience).
- Analytical Problem Solver: You have advanced logical reasoning skills to identify security discrepancies, analyze technology fit, and propose strategically aligned controls.
- Global Collaborator& Mentor: You are fluent in English, experienced in working within Agile matrixed global environments, and skilled at mentoring colleagues and managing Managed Service Providers (MSPs).
Ready to bring your unique qualities to Roche and make an impact? Apply now and join us in our mission to shape the future of healthcare.
#RDT2026
Wer wir sind
Eine gesündere Zukunft treibt uns zur Innovation an. Mehr als 100.000 Mitarbeiter weltweit arbeiten gemeinsam daran, wissenschaftliche Fortschritte zu erzielen und sicherzustellen, dass jeder Zugang zur Gesundheitsversorgung hat – heute und für zukünftige Generationen. Durch unser Engagement werden über 26 Millionen Menschen mit unseren Medikamenten behandelt und mehr als 30 Milliarden Tests mit unseren Diagnostik-Produkten durchgeführt. Wir ermutigen uns gegenseitig, neue Möglichkeiten zu erkunden, Kreativität zu fördern und hohe Ziele zu setzen, um lebensverändernde Gesundheitslösungen zu liefern.
Gemeinsam können wir eine gesündere Zukunft gestalten.
Roche ist ein Arbeitgeber, der die Chancengleichheit fördert.
