IT GRC Specialist

About Mundipharma

Mundipharma is a global healthcare company dedicated to delivering innovative treatments in areas such as pain management and infectious diseases across multiple regions including Africa, Asia Pacific, Canada, Europe, Latin America, and the Middle East. Their core values focus on integrity and patient-centricity.

Role Overview

The IT Governance, Risk & Compliance (GRC) Specialist will be part of the IT department located in Cambridge, working onsite. The role involves managing organizational IT risks, ensuring compliance with legal and internal requirements, embedding effective controls, and maintaining oversight aligned with the company’s risk appetite.

Key Responsibilities

• Lead end-to-end IT risk management processes, ensuring legal compliance and comprehensive risk ownership and mitigation, communicated clearly to leadership.
• Establish and maintain frameworks for AI governance and risk, ensuring responsible and transparent AI technology usage across the organization.
• Maintain and review IT policies in collaboration with department heads, identifying gaps, facilitating reviews, and driving ongoing improvements.
• Perform regular audits of internal IT processes to ensure compliance with governance standards and implement corrective action plans.
• Serve as the main contact for internal and external IT audits, coordinating with stakeholders for coherent and efficient responses that minimize disruption.
• Proactively identify, track, and address potential audit risks and control weaknesses to prevent formal findings.
• Develop and maintain strong relationships with internal audit teams to align IT operations with enterprise governance strategies.
• Manage IT governance, security, and policy training initiatives through the Global Learning Management System, supporting content creation and compliance tracking.
• Provide detailed risk reporting at various levels for IT leadership, collaborating globally to incorporate best practices.

Qualifications and Experience

• University or Master's degree in IT or a related discipline.
• Demonstrated experience in managing IT risks, preferably in a governance, risk, and compliance capacity.
• Experience in the pharmaceutical sector is beneficial but candidates from other industries will be considered.
• Strong understanding of audit procedures with a successful track record responding to internal and external reviews.
• Knowledge of core GRC frameworks such as ISO 27001, ISO 9001, ITIL, and COBIT.
• Proficiency in quality management, policy governance, and document management systems.
• Familiarity with GRC tools like Vanta and experience in creating SCORM-compliant training materials using Articulate are advantages.
• Practical knowledge of ITIL process implementation and cybersecurity collaboration.
• Excellent negotiation and stakeholder management skills in a global organizational context.
• Strong process orientation with ability to identify and lead improvements.
• Agile, solution-oriented team player eager to learn and contribute positively.

Benefits and Work Environment

• Comprehensive flexible benefits package.
• Access to a wide range of learning and development initiatives.
• Supportive, collaborative, and inclusive workplace culture that values diversity and individuality.

Diversity and Inclusion

The company prioritizes creating an inclusive setting where all employees feel respected, valued, and empowered to express their authentic selves every day. Through education and awareness, the organization strives to foster a culture that celebrates diversity and uniqueness.

Additional Details

• Location: Cambridge, United Kingdom (onsite)
• Full-time permanent role
• Primary worksite: GB Cambridge
• Job posting date: July 31, 2026