IT GRC Lead - AI, Risk & Policy (Hybrid Cambridge)

Mundipharma; Cambridge; Hybrid; GBP 65,000 - 90,000; Full time

Benefits offered by this job

Flexible benefits package

Learning & development program

Collaborative environment

Job summary

Mundipharma, Cambridge, is seeking a seasoned IT Governance, Risk & Compliance (GRC) Specialist to lead IT risk management, governance, and audit responses within a hybrid setup. You will translate requirements into practical controls across business and technology processes, maintaining evidence to demonstrate compliance and control effectiveness.

The role emphasizes AI governance, policy frameworks, audits coordination, and training program delivery.

Qualifications

• University degree in IT with hands-on IT risk management experience.
• Experience in IT Governance, Risk & Compliance (GRC) in pharma or related industries preferred.
• Strong understanding of audit operations and responding to audits.

Responsibilities

• Lead end-to-end IT risk management, ensuring risks are detailed, owned, mitigated, and communicated to leadership.
• Establish and oversee AI risk frameworks for responsible use of AI technologies.
• Maintain and review IT policies, identify documentation gaps, and drive policy improvement cycles.
• Conduct audits of internal IT processes to verify governance and implement remediation plans.
• Coordinate with system owners to deliver audit responses with minimal disruption.
• Identify, track, and remediate IT audit risks and control weaknesses.
• Collaborate with internal audit teams to align IT operations with governance goals.
• Administer IT governance, security, and policy training via LMS and develop training content.

Skills

IT Governance

Risk management

Audit operations

Stakeholder management

Policy governance

Education

University degree in IT

Master’s degree in IT

Tools

Vanta

Articulate

ITIL

Job description

Mundipharma, Cambridge, is seeking a seasoned IT Governance, Risk & Compliance (GRC) Specialist to lead IT risk management, governance, and audit responses within a hybrid setup. You will translate requirements into practical controls across business and technology processes, maintaining evidence to demonstrate compliance and control effectiveness.

The role emphasizes AI governance, policy frameworks, audits coordination, and training program delivery.