GRC – Technical Controls Analyst II

Posted 70ds ago

Employment Information

Education
Salary
Experience
Job Type

Report this job

Job expired or something wrong with this job?

Job Description

GRC / Technical Controls Analyst managing PCI Pharma's cybersecurity governance program. Bridging technical security and business compliance with pharmaceutical regulatory requirements.

Responsibilities:

  • Manage PCI Pharma's cybersecurity governance, risk, and compliance program
  • Develop and maintain cybersecurity policies, standards, and procedures
  • Manage technical controls auditing across 150+ applications and systems quarterly
  • Coordinate GxP computer system validation activities with Quality Assurance team
  • Conduct risk assessments for new systems, vendors, and business initiatives
  • Maintain compliance evidence and documentation for regulatory audits
  • Lead internal security control assessments and gap remediation tracking
  • Support third-party/vendor cyber risk management
  • Develop and track key risk indicators (KRIs) and security metrics
  • Coordinate with external auditors and manage audit finding remediation

Requirements:

  • Bachelor's degree in Information Security, Risk Management, or related field
  • 4+ years of experience in GRC, security compliance, or audit roles
  • Strong knowledge of security frameworks (NIST CSF, ISO 27001, CIS Controls)
  • Experience with pharmaceutical regulations (21 CFR Part 11, GxP, Annex 11)
  • Proficiency in controls testing and evidence collection
  • Experience with risk assessment methodologies
  • Strong documentation and technical writing skills
  • Excellent communication skills for audit and stakeholder interactions
  • Project management capabilities for compliance initiatives

Benefits:

  • Health insurance
  • Retirement plans
  • Paid time off
  • Flexible work arrangements
  • Professional development opportunities