AI Security Risk Manager

Astellas is a global life sciences company committed to turning innovative science into VALUE for patients. We provide transformative therapies in disease areas that include oncology, ophthalmology, urology, immunology and women's health. Through our research and development programs, we are pioneering new healthcare solutions for diseases with high unmet medical need. Learn more at Astellas.com 

We're seeking passionate individuals who thrive in dynamic environments, embrace new ideas, and aren't afraid to take intelligent risks. People who act with unwavering integrity and are deeply committed to making a tangible impact.

Help Astellas use AI with confidence. As AI Security Risk Manager, you will assess the security risks of the AI tools Astellas builds and buys, from copilots and agents to AI-enabled vendor products, and give clear, practical recommendations so teams can move forward safely.

Responsibilities and Accountabilities:

Scope: AI applications, agents, copilots, machine learning systems and AI platforms, built in-house or provided by vendors, including GxP-regulated uses.

• AI Security Risk Assessments: Assess AI systems for AI-specific threats, such as prompt injection, jailbreaks, data poisoning, model theft, sensitive data leakage and agents acting beyond their intended authority, and evaluate attack surface and control effectiveness.
• AI Security Vendor Reviews: Provide the AI-specific security review within Astellas' third-party risk process: assess AI providers' controls and evidence, check alignment with Astellas AI security requirements, and advise on AI security terms in contracts.
• Security Risk Treatment & Reporting: Document findings and recommendations; assess residual risk and treatment options; facilitate risk acceptance decisions with system owners; track findings through remediation; and produce clear reports and executive summaries.
• Frameworks & Compliance: Assess alignment with NIST AI RMF, ISO 42001, OWASP Top 10 for LLMs, the EU AI Act and Astellas AI policies; support audits; and maintain the AI risk assessment method and procedures.

Required Qualifications:

• Bachelor's degree in Cybersecurity, Computer Science, Information Systems or a related field.
• 8+ years in cybersecurity risk, GRC or security assessment.
• 5+ years assessing AI or cloud-based technologies.
• Good understanding of AI security threats and attack techniques.
• Strong report writing and the ability to explain risk to business and technical audiences.

Preferred Qualifications:

• Experience in vendor or technology risk management, ideally using OneTrust.
• Experience in pharmaceutical, life sciences or other regulated industries.
• Familiarity with threat modeling and risk quantification methods (e.g., MITRE ATLAS, FAIR).
• Certifications such as CRISC, CISA, CISSP, IAPP AIGP or Certified FAIR Analyst.

Working Environment:

At Astellas we recognize the importance of work/life balance, and we are proud to offer a hybrid working solution allowing time to connect with colleagues at the office with the flexibility to also work from home. We believe this will optimize the most productive work environment for all employees to succeed and deliver. Hybrid work from certain locations may be permitted in accordance with Astellas’ Responsible Flexibility

• Global collaboration: Become part of a connected global business of like-minded life science leaders, all dedicated to improving patients' lives worldwide. 
• Real-world patient impact: Contribute to transformative therapies that reach patients around the world, knowing your work makes a difference every day.
• Relentless Innovation: Join a company at the forefront of scientific breakthroughs, where you'll have the opportunity to shape the future of healthcare. 
• A Culture of Growth: Chart your own course within a supportive environment that values your contributions, champions your development, and empowers you to pursue your passions.

Values: Innovation, Integrity and Impact sit at the heart of what we do. 

Behaviors: We come together as ‘One Astellas’, working with courage and a sense of urgency. We are outcome focused and consistently take accountability for our personal contribution.