GRC – Technical Controls Analyst II
Posted 70ds ago
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
GRC / Technical Controls Analyst managing PCI Pharma's cybersecurity governance program. Bridging technical security and business compliance with pharmaceutical regulatory requirements.
Responsibilities:
- Manage PCI Pharma's cybersecurity governance, risk, and compliance program
- Develop and maintain cybersecurity policies, standards, and procedures
- Manage technical controls auditing across 150+ applications and systems quarterly
- Coordinate GxP computer system validation activities with Quality Assurance team
- Conduct risk assessments for new systems, vendors, and business initiatives
- Maintain compliance evidence and documentation for regulatory audits
- Lead internal security control assessments and gap remediation tracking
- Support third-party/vendor cyber risk management
- Develop and track key risk indicators (KRIs) and security metrics
- Coordinate with external auditors and manage audit finding remediation
Requirements:
- Bachelor's degree in Information Security, Risk Management, or related field
- 4+ years of experience in GRC, security compliance, or audit roles
- Strong knowledge of security frameworks (NIST CSF, ISO 27001, CIS Controls)
- Experience with pharmaceutical regulations (21 CFR Part 11, GxP, Annex 11)
- Proficiency in controls testing and evidence collection
- Experience with risk assessment methodologies
- Strong documentation and technical writing skills
- Excellent communication skills for audit and stakeholder interactions
- Project management capabilities for compliance initiatives
Benefits:
- Health insurance
- Retirement plans
- Paid time off
- Flexible work arrangements
- Professional development opportunities


















