IT GRC Specialist

Mundipharma International; Cambridge; On-site; GBP 60,000 - 90,000; Full time

Benefits offered by this job

Flexible benefits package

Learning & development programmes

Collaborative, inclusive environment

Job summary

Mundipharma Cambridge is hiring an IT GRC Specialist to lead IT risk management and governance across the organisation. Hybrid role based in Cambridge, UK, with responsibilities spanning policy, audits, and AI risk oversight.

The role requires a strong IT governance background, familiarity with GRC frameworks, and experience coordinating with global stakeholders. Training and development opportunities are offered.

Qualifications

• University or Master’s degree in IT or related field with risk management experience.
• Experience in IT Governance, Risk & Compliance (GRC) preferred in pharma or similar industries.
• Knowledge of ISO27001, ISO9001, ITIL, COBIT frameworks.
• Ability to document and govern IT policies and controls.
• Experience with IT audits and remediation planning.

Responsibilities

• Lead end-to-end IT risk management, detailing enterprise risks and mitigation.
• Establish AI risk frameworks for responsible, compliant use of AI.
• Maintain IT policies; identify gaps and drive reviews with department heads.
• Audit internal IT processes for governance compliance and remediation.
• Coordinate with auditors and system owners to provide consistent responses.
• Identify and remediate audit risks and control weaknesses proactively.
• Deliver IT governance training and compliance reporting via LMS.
• Prepare risk reports for IT leadership and global teams.

Skills

Process mindset

Stakeholder management

Agile mindset

Negotiation

Cybersecurity collaboration

GRC platforms (Vanta)

SCORM content creation

Education

University/Master’s in IT

Tools

Vanta

Articulate

SCORM

Job description

## IT GRC SpecialistApplylocations: GB Cambridgetime type: Full timeposted on: Posted 3 Days Agojob requisition id: JR2579**IT GRC Specialist******Location:**** Cambridge, Hybrid****Department:**** IT****Job type:**** Full Time****Join us and make a difference when it matters most!****At Mundipharma, we are proud of the work we do to bring innovative treatments to patients. We challenge ourselves constantly to deliver more for patients, healthcare professionals, our partners, and our employees. ****The Team****The IT Governance, Risk & Compliance (GRC) Specialist will join the IT team at Mundipharma ensuring the organisation understands its key risks and manages them appropriately in line with its risk appetite, while maintaining effective governance, controls, and oversight. Translating requirements into practical, proportionate controls embedded across business and technology processes, and ensures suitable evidence is maintained to demonstrate compliance and control effectiveness.****Role and Responsibilities***** Lead the end-to-end IT risk management practice, ensuring legal obligations are met and enterprise risks are detailed, owned, mitigated, and clearly communicated to leadership.* AI Governance & Risk Management - Establish and oversee AI risk frameworks, ensuring the responsible, transparent, and compliant use of AI technologies across all organizational use cases.* Policy Framework & Governance: Maintain and review IT policies, partnering with department heads to identify documentation gaps, execute review cycles, and drive continuous policy improvement.* Conduct regular audits of internal IT processes to verify compliance with governance frameworks and implement structured remediation plans.* Act as the primary point of contact for internal and external IT audits, coordinating with system owners to deliver consistent responses while minimizing operational disruption.* Identify, track, and remediate potential audit risks and control weaknesses proactively to prevent formal audit findings.* Build and sustain strong working relationships with internal audit teams to ensure ongoing alignment between IT operations and enterprise governance goals.* Manage and administer IT governance, security, and policy training programs across IT and the wider business via the Global Learning Management System (LMS).* Support the development of engaging training content and deliver regular compliance reporting against key performance indicators.* Maintain macro- and micro-level risk reporting for IT leadership while collaborating with global training and compliance teams to adopt best practices.****What you’ll bring***** University or Master’s degree in IT (or related field), backed by proven experience managing risks within an IT organisation.* Previous experience in an IT Governance, Risk & Compliance (GRC) related position in the Pharmaceutical industry would be advantageous but other industries would be considered.* Deep understanding of audit operations and a track record of successfully managing responses to both internal and external audits.* Sound knowledge of core GRC practices and industry frameworks, such as ISO 27001, ISO 9001, ITIL, and COBIT.* Document & Quality Control - Expertise in quality management principles, policy governance, and administering Document Management Systems.* Experience using GRC platforms like Vanta (preferred) and creating SCORM-compliant training content with Articulate would be advantageous.* Practical experience implementing ITIL processes and collaborating directly with cybersecurity teams to mitigate risk.* Excellent negotiation and global stakeholder relationship-building skills with the ability to influence management-level stakeholders in a global environment.* Process-Driven Improvement: Strong process mindset with a proven ability to spot improvement opportunities and lead them through to completion.* Agile & Collaborative Mindset - Adaptable, solution-focused team player who enjoys learning new skills and driving a positive impact across the business.****What we offer in return***** Flexible benefits package* Opportunities for learning & development through our varied programme* Collaborative, inclusive work environment****Diversity and inclusion****Building an inclusive environment where people can thrive, grow and achieve their full potential is a priority. We believe this isn’t just the right thing, but also the smart thing to do. We are on a journey and will seek to move forward together through education and awareness to build a culture that welcomes and celebrates diversity and uniqueness. We will create a workplace environment where everyone can, every day, bring their authentic selves and is treated with dignity and respect. ****About Mundipharma****Mundipharma is a global healthcare company focussing on customers across Africa, Asia Pacific, Canada, Europe, Latin America, and the Middle East. Mundipharma is dedicated to bringing innovative treatments to patients in the areas of pain management, infectious disease as well as other severe and debilitating disease areas. Their guiding principles, centered around Integrity and Patient-Centricity, are at the heart of everything they do. For more information visit www.mundipharma.com. ****Join our talent pool****If you’re not sure this role is right for you but you’re keen to hear about future opportunities at Mundipharma, join our talent community and be the first to hear about new roles.**Additional Job Description:****Primary Location:**GB Cambridge**Job Posting Date:**2026-07-31**Job Type:**Permanent