IT GRC Specialist

TL;DR

IT GRC Specialist (IT Governance/Risk/Compliance): Lead end-to-end IT risk management and ensure legal obligations are met through practical, proportionate controls embedded across business and technology processes, with an accent on AI governance & risk management, audit readiness, and policy/control effectiveness. Focus on building evidence for compliance, coordinating internal and external IT audits, and driving remediation of audit risks and control weaknesses.

Company

Global healthcare company focused on innovative treatments across multiple regions.

What you will do

• Lead end-to-end IT risk management, ensuring enterprise risks are owned, mitigated, and communicated to leadership.
• Establish and oversee AI governance and risk management frameworks for responsible, transparent, and compliant AI use.
• Maintain and improve IT policy frameworks by identifying documentation gaps and executing review cycles.
• Conduct regular audits of internal IT processes, coordinate remediation plans, and proactively prevent audit findings.
• Act as primary point of contact for internal and external IT audits and coordinate consistent responses with system owners.
• Administer IT governance, security, and policy training via the Global Learning Management System (LMS) and deliver compliance reporting against KPIs.

Requirements

• University or Master’s degree in IT (or related field) with proven experience managing risks within an IT organization.
• Deep understanding of audit operations and experience managing responses to internal and external audits.
• Sound knowledge of core GRC practices and frameworks including ISO 27001, ISO 9001, ITIL, and COBIT.
• Expertise in quality management principles, policy governance, and administering document management systems.
• Experience using GRC platforms (Vanta preferred) and creating SCORM-compliant training content with Articulate (advantageous).
• Practical experience implementing ITIL processes and collaborating with cybersecurity teams to mitigate risk.

Culture & Benefits

• Flexible benefits package.
• Opportunities for learning and development through a varied program.
• Collaborative, inclusive work environment.

Hiring process

• Interviews and evaluation of GRC, audit, and governance experience.
• Discussion of fit for AI governance, policy/control effectiveness, and stakeholder management.