Manager, Email Security Engineering

ROLE SUMMARY   Our Global Cyber Defense team is responsible for safeguarding Pfizer’s digital assets and infrastructure through proactive threat detection, response, and risk mitigation across on-premises, cloud, and hybrid environments.   The Manager, Email Security Engineering is responsible for leading and advancing enterprise-wide protections across email, collaboration, and messaging platforms—critical threat surfaces within the Cyber Defense organization. Email remains a primary vector for phishing, business email compromise, malware delivery, and account takeover in the pharmaceutical industry.   This role will lead the design, implementation, and continuous improvement of email security capabilities across our global enterprise. The role is critical to protecting research, clinical, manufacturing, and corporate environments by delivering resilient, scalable, and compliant controls that prevent, detect, and respond to email-borne threats. ROLE RESPONSIBILITIES   • Lead Email Security Engineering initiatives across enterprise email, collaboration, and messaging platforms, including secure email gateways, cloud email security, anti-phishing, anti-malware, and domain protection capabilities. • Define and execute the email security strategy and roadmap in alignment with the evolving threat landscape, business priorities, and regulatory requirements. • Own the engineering and lifecycle management of email security technologies, including deployment, configuration, policy tuning, automation, integration, performance, and continuous optimization. • Strengthen defenses against phishing, business email compromise, malicious attachments and links, spoofing, impersonation, and account takeover through layered preventive and detective controls. • Integrate email and messaging telemetry with security information and event management, security orchestration, automation and response, identity, threat intelligence, and incident response workflows. • Partner with Cyber Defense, Identity, Messaging, Collaboration, Legal, Compliance, and IT teams to reduce risk and coordinate response to email-related threats and incidents. • Establish and enforce email security standards aligned with the NIST Cybersecurity Framework, corporate policies, and compliance expectations. • Lead and develop a high-performing engineering team, driving accountability, technical excellence, global service reliability, and measurable security outcomes. BASIC QUALIFICATIONS • Bachelor’s degree in Information Security, Computer Science, Engineering, or a related field, or equivalent practical experience. • 4+ years of cybersecurity experience, including demonstrated depth in email, messaging, collaboration, or cloud security engineering. • Hands-on experience with enterprise email security technologies and controls, such as Microsoft 365 or Exchange Online Protection, secure email gateways, anti-phishing and anti-malware solutions, URL and attachment analysis, and email authentication standards including SPF, DKIM, and DMARC. • Experience designing, operating, and scaling email security controls in large, complex, and highly regulated global environments. • Proven ability to translate technical risk, threat trends, and control effectiveness into clear business impact for senior stakeholders. • Demonstrated experience in an agile work environment possessing qualities such as a collaborative mindset, adaptability to change, and a proactive problem-solving approach. PREFERRED QUALIFICATIONS   • Experience in the pharmaceutical, biotech, or life sciences industry. • Experience protecting high-risk users from targeted phishing, impersonation, business email compromise, and account takeover. • Professional certifications such as CISSP, CISM, CCSP, or simila