Senior Risk & GRC Analyst — Cyber, AI & GxP Focus

BioSpace; Warszawa; On-site; PLN 180,000 - 280,000; Full time

Benefits offered by this job

Healthcare

Well-being programs

Paid time off

Job summary

Moderna is expanding its Digital Core Governance, Risk and Compliance (GRC) team in Warsaw. You will help strengthen how we identify, assess, monitor, and communicate technology, cybersecurity, and emerging risks across the organization.

Join a collaboration across technology, quality, privacy, legal, and business teams to enable risk-based decision-making in a regulated life sciences environment. You’ll document risk requirements, controls, evidence, escalation points, and human oversight for

Qualifications

• 5+ years of experience in cybersecurity/technology risk management, GRC or related
• Experience with risk assessments, control evaluations, issue management, remediation tracking
• Experience in GxP-regulated environments and IT controls
• Strong written and verbal communication for technical and non-technical stakeholders
• Experience using AI to optimize risk analysis, documentation and reporting
• Ability to influence in matrixed organizations without direct authority

Responsibilities

• Identify, assess, monitor, and report digital, technology, cybersecurity, and emerging risks across Moderna
• Conduct risk assessments, evaluate exposure, control effectiveness, and remediation needs
• Collaborate with cross-functional teams to gather information and align on remediation plans
• Document control gaps, track remediation, and monitor action plans
• Maintain accurate risk data in GRC systems and related repositories
• Prepare risk reports, metrics, dashboards, and executive summaries for governance forums
• Analyze risk trends to mature Moderna's risk management program
• Support AI/automation-enabled risk management processes and documentation
• Develop process documentation, templates, and guidance for scalable risk management

Skills

Cybersecurity risk management

Technology risk management

GRC

IT controls

Risk reporting

Stakeholder management

AI risk applications

Education

Four-year degree or equivalent

Tools

OneTrust

ServiceNow

Jira

Power BI

Excel

SharePoint

Job description

Moderna is expanding its Digital Core Governance, Risk and Compliance (GRC) team in Warsaw. You will help strengthen how we identify, assess, monitor, and communicate technology, cybersecurity, and emerging risks across the organization.

Join a collaboration across technology, quality, privacy, legal, and business teams to enable risk-based decision-making in a regulated life sciences environment. You’ll document risk requirements, controls, evidence, escalation points, and human oversight for