GRC Strategy Lead, Information Security & Compliance

Servier Pharmaceuticals; Boston (MA); Hybrid; USD 179,000 - 212,000; Full time

Job summary

Servier is seeking an Associate Director of Information Security Governance, Risk & Compliance in Boston. This leader will establish and run the GRC program for the US affiliate, partnering with Global Information Security, IT, Legal, Privacy, Procurement, Quality and Internal Audit to translate risk into business impact.

The role guides policy, third‑party risk, audit readiness and control assurance, while leading a team of managers, analysts, and service providers in a fast‑paced,

Qualifications

• Minimum of 8+ years of experience in information security GRC, IT risk management, cybersecurity, compliance, audit, or related disciplines.
• Minimum of 3+ years in a leadership role with responsibility for program ownership, people leadership, or management of managers.
• Bachelor's degree preferred in Cybersecurity, Information Technology, Information Systems, Business, Risk Management, or a related field.
• Deep expertise in information security risk frameworks and governance models (e.g., NIST CSF 2.0, ISO 27001, PCI, SOX, FAIR).
• Relevant certifications such as CISSP, CISM, CRISC, CISA, CGRC, FAIR, or equivalent preferred.
• Strong executive communication skills with ability to influence senior stakeholders in a global, matrixed organization.

Responsibilities

• Lead the US GRC program and manage GRC managers, analysts, contractors, and service providers.
• Partner with Global Information Security, IT, Legal, Privacy, Procurement, Quality, Internal Audit and business units.
• Define governance routines, cadence, reporting, and execution standards for US GRC functions.
• Ensure alignment with Global risk management methodology, baselines, and governance expectations.
• Oversee policy governance, third-party risk management, audit readiness, and control assurance.

Skills

Leadership

Executive communication

Risk management

Cybersecurity

GRC

Education

Bachelor's degree preferred in Cybersecurity/IT/IS/Business/Risk Management

Job description

Servier is seeking an Associate Director of Information Security Governance, Risk & Compliance in Boston. This leader will establish and run the GRC program for the US affiliate, partnering with Global Information Security, IT, Legal, Privacy, Procurement, Quality and Internal Audit to translate risk into business impact.

The role guides policy, third‑party risk, audit readiness and control assurance, while leading a team of managers, analysts, and service providers in a fast‑paced,