Senior Third-Party Cyber Risk Strategist

Initial Therapeutics, Inc.; Poland; Hybrid; PLN 180,000 - 280,000; Full time

Benefits offered by this job

Competitive healthcare

Well-being resources

Paid time off and holidays

Global mobility programs

Job summary

Moderna Warsaw is expanding its Digital Core Governance, Risk and Compliance organization to strengthen third-party cybersecurity risk management across the enterprise. You will assess cybersecurity risks in a regulated life sciences environment while enabling secure adoption of AI-enabled technologies.

Join a cross-functional team partnering with Legal, Privacy, Procurement and business owners to drive risk-based decisions that protect patients worldwide.

Qualifications

• Requires 5+ years in cybersecurity risk management or GRC.
• Experience reviewing third-party cybersecurity assessments and remediation tracking.
• Experience in a GxP-regulated environment is required.
• Strong written and verbal communication with technical and non-technical stakeholders.
• Experience using AI to enhance risk analysis, documentation, or workflows.

Responsibilities

• Own end-to-end third-party cybersecurity risk review process from intake to governance reporting.
• Review assessments to identify gaps, residual risks, and remediation needs.
• Support risk management practices across the enterprise.
• Review cybersecurity addenda and contract obligations (incl. incident notification, access control, encryption).
• Align risk decisions with Legal, Privacy, Procurement and business owners.
• Analyze risk trends across vendors, AI capabilities, and fourth-party dependencies.
• Provide clear, actionable analysis to support risk treatment decisions.
• Maintain accurate third-party risk data for governance reporting.

Skills

Cybersecurity risk management

GRC experience

Risk analysis

Stakeholder engagement

AI-enabled services knowledge

Education

Bachelor's degree in Information Security / IT

Tools

OneTrust

ServiceNow

Jira

Power BI

Excel

SharePoint

Job description

Moderna Warsaw is expanding its Digital Core Governance, Risk and Compliance organization to strengthen third-party cybersecurity risk management across the enterprise. You will assess cybersecurity risks in a regulated life sciences environment while enabling secure adoption of AI-enabled technologies.

Join a cross-functional team partnering with Legal, Privacy, Procurement and business owners to drive risk-based decisions that protect patients worldwide.