CareerPlanSign in

IT GRC Specialist

GB Cambridge💼 Full-time🗓 2026-09-11 → 2026-09-27

Core

Lead end-to-end IT risk management, establish AI governance frameworks, and maintain IT policies and controls to ensure compliance and mitigate enterprise risks.

Role type

IT Governance, Risk & Compliance (GRC) Specialist

Builds

IT risk management practices, AI risk frameworks, policy governance structures, and compliance reporting.

Domain

Healthcare / Pharmaceutical industry IT

Deliverable

production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work

Required skills

IT risk management, audit operations, GRC frameworks (ISO 27001, ISO 9001, ITIL, COBIT), policy governance, document management systems, GRC platforms (Vanta), SCORM-compliant training content creation, ITIL processes, cybersecurity collaboration, stakeholder relationship building, process improvement.

Preferred skills

Pharmaceutical industry experience, Vanta platform experience, Articulate software experience.

Responsibilities

Lead end-to-end IT risk management practice; Establish and oversee AI risk frameworks; Maintain and review IT policies; Conduct regular audits of internal IT processes; Act as primary point of contact for internal and external IT audits; Identify, track, and remediate potential audit risks; Manage and administer IT governance, security, and policy training programs; Support development of engaging training content; Maintain macro- and micro-level risk reporting.

Seniority

Mid-level to Senior, hands-on IC

Sourced via workday · Listed on CareerPlan, which tracks 70,000+ jobs from 20+ sources.