Associate Analyst, IT Governance Risk & Compliance

Neurocrine Biosciences; San Diego (CA); Hybrid; USD 43,000 - 57,000; Full time

Benefits offered by this job

Retirement plan with company match

Paid vacation

Paid holidays

Personal days

Parental leave

Medical leave

Health benefits

Job summary

Neurocrine Biosciences is seeking an entry‑level GRC support role within the Cyber Security Governance, Risk, and Compliance program. Under guidance, you will help with risk assessments, third‑party reviews, audits, policy administration, evidence collection, and reporting.

You will build knowledge of GRC processes, regulatory requirements, and cybersecurity frameworks while delivering accurate, timely work and supporting continuous process improvements.

Qualifications

• Bachelor’s degree or equivalent in cybersecurity, IT, information systems, business, or risk management.
• 0–2 years of related experience; internships, co-ops, or projects qualify.
• Foundational understanding of IT cybersecurity, governance, risk, and controls.

Responsibilities

• Assist with routine IT and Cyber Security risk assessments by gathering evidence and documenting results.
• Support third‑party risk activities by tracking requests and organizing vendor evidence.
• Coordinate evidence requests for framework assessments, audits and compliance reviews.
• Maintain GRC records including risk registries, controls, issues, and status in approved systems.
• Map policies and controls to requirements and frameworks such as NIST CSF 2.0, ISO 27001, CIS Controls, SOC 2.
• Track remediation activities and follow up on due dates with owners.
• Assist with policy administration, templates, and training records.

Skills

Communication

Problem solving

Analytical skills

Detail oriented

Team collaboration

Microsoft 365

Education

Bachelor's degree in Cybersecurity/IT/Information Systems/Business/Risk Management

Associate's degree in Cybersecurity/IT/Information Systems/Business/Risk Management

Tools

NIST CSF 2.0

ISO 27001

CIS Controls

SOC 2

Job description

Who We Are

Neurocrine Biosciences is a leading biopharmaceutical company with a simple purpose: to relieve suffering for people with great needs. We are dedicated to discovering, developing and commercializing life‑changing treatments for patients with under‑addressed neurological, psychiatric, endocrine and immunological disorders. The company's diverse portfolio includes FDA‑approved treatments for tardive dyskinesia, chorea associated with Huntington's disease, classic congenital adrenal hyperplasia, hyperphagia in Prader‑Willi syndrome, endometriosis* and uterine fibroids*, as well as a robust pipeline including multiple compounds in mid‑to‑late‑phase clinical development across our core therapeutic areas. For more than three decades, we have applied our unique insight into neuroscience and the interconnections between brain and body systems to treat complex conditions. We relentlessly pursue medicines to ease the burden of debilitating diseases and disorders, because you deserve brave science. For more information, visit neurocrine.com, and follow the company on LinkedIn, X, Facebook and YouTube. (*in collaboration with AbbVie)

About the Role

Provides entry‑level support for the Cyber Security Governance, Risk, and Compliance (GRC) program, under regular guidance and direction from the GRC Lead. Supports risk assessments, third‑party reviews, audit and compliance support, policy administration, evidence collection, issue tracking, and reporting. Builds practical knowledge of GRC processes, business objectives, regulatory requirements, and cybersecurity frameworks while delivering accurate, timely work.

Your Contributions

• Assist with routine IT and Cyber Security risk assessments by gathering evidence, documenting results in established templates, and escalating questions, exceptions or potential concerns for review
• Supports third‑party risk activities by tracking requests and questionnaires, organizing vendor evidence, completing initial completeness checks, and maintaining assessment records
• Supports framework assessments, audits and compliance reviews by coordinating evidence requests, organizing artifacts, reviewing submissions for completeness against established requirements, and documenting follow‑up items
• Maintains accurate GRC records, including risk registries, controls, issues, action plans, exceptions, and assessment status, in approved systems and repositories
• Assists with mapping policies, controls, and evidence to requirements and frameworks, such as NIST CSF 2.0, ISO 27001, and CIS Controls, using documented procedures
• Tracks assigned remediation activities and due dates, follows up with action owners, documents updates, and escalates overdue or unclear items
• Supports policy and procedure administration through formatting, review routing, version control, publication, and maintenance of communication or training records
• Prepares routine metrics, dashboards, and status reports using established templates; validates data accuracy and supports investigation of identified data variances under guidance
• Participates in meetings, training, assigned research and process improvements activities; communicates professionally, protects confidential information, and performs assigned GRC support duties

Requirements

• Bachelor´s degree in Cybersecurity, IT, Information Systems, Business, Risk Management, or a related field and 0-2 years of related experience; internships, co‑ops, academic projects, labs, or equivalent practical experience qualify OR Associate´s degree in Cybersecurity, IT, Information Systems, Business, Risk Management, or a related field and 1+ year of related experience, including internships, co‑ops, military service, or equivalent practical experience
• Certification is not required; relevant coursework, training, or a foundational certification is preferred
• Understands Neurocrine's objectives and begins to develop knowledge of its business, services, customers, and operating environment
• Ability to work collaboratively, follow direction, ask questions, and apply feedback
• Proficiency with Microsoft 365 applications
• Good communication, problem‑solving, and analytical skills
• Detail oriented, with a focus on data quality, accuracy, and follow-through
• Ability to organize work, follow established priorities, and meet deadlines with guidance
• Foundational understanding of IT cybersecurity, governance, risk, compliance and IT controls gained through education, training, internships, projects or related experience.
• Interest in pursuing relevant foundational cybersecurity or GRC certifications as part of ongoing professional development.
• Familiarity with NIST CSF, ISO 27001, CIS Controls, or SOC 2 through coursework or experience
• Ability to collect, organize, and review evidence against defined criteria under supervision
• Basic spreadsheet skills to sort, filter, reconcile, and summarize information accurately
• Ability to document processes, notes, and findings clearly using established templates
• Ability to handle confidential information with discretion and follow established procedures
• Ability and willingness to learn GRC processes, tools, and authoritative guidance; receive coaching and apply feedback; and pursue ongoing professional development.
• Familiarity with automation tools and Artificial Intelligence (A.I.) concepts, including responsible use, privacy, and security

Neurocrine Biosciences is an EEO/Disability/Vets employer. We are committed to building a workplace of belonging, respect, and empowerment, and we recognize there are a variety of ways to meet our requirements. We are looking for the best candidate for the job and encourage you to apply even if your experience or qualifications don’t line up to exactly what we have outlined in the job description.

The hourly rate we reasonably expect to pay is $30.97-$41.37. Individual pay decisions depend on various factors, such as primary work location, complexity and responsibility of role, job duties/requirements, and relevant experience and skills. In addition, this position offers an annual bonus with a target of 15% of the earned base salary and eligibility to participate in our equity based long term incentive program.

Benefits offered include a retirement savings plan (with company match), paid vacation, holiday and personal days, paid caregiver/parental and medical leave, and health benefits to include medical, prescription drug, dental and vision coverage in accordance with the terms and conditions of the applicable plans.

Neurocrine Biosciences was named one of the FORTUNE Best Workplaces in Biopharma™ 2025. We were also named a Great Place to Work® Certified company. ©2025 Fortune Media IP Limited. All rights reserved. Used under license.

Our Values

• PASSION: We are driven and love what we do. We are committed to our goals and to making a difference.
• INTEGRITY: We do the right thing for patients and our community. We take accountability. We speak up.
• COLLABORATION: We trust one another. We are inclusive. We are respectful. We are transparent. Together we succeed.
• INNOVATION: We seek and create optimal solutions.
• TENACITY: We do not quit. We adapt. We accomplish what others cannot.

Come join our team during this exciting time of growth and opportunities!