Senior Third-Party Cyber Risk & Compliance Analyst

Moderna Therapeutics; Cambridge (MA); Vor Ort; USD 146.000 - 234.000; Vollzeit

Zusammenfassung

Moderna Digital Core Governance, Risk and Compliance is seeking a Risk Management Analyst to support end-to-end third-party cybersecurity risk reviews across Moderna. You will assess scoping, risk analysis, remediation tracking, risk disposition, governance reporting, and process documentation in a regulated life sciences environment.

You will partner with Legal, Privacy, Procurement, and technical stakeholders to align risk decisions with contract obligations and governance expectations, while

Qualifikationen

• Minimum 5+ years in cybersecurity risk management or related field.
• Experience owning or supporting third-party cybersecurity risk reviews and risk disposition.
• Experience in a GxP-regulated environment is required.

Aufgaben

• Own end-to-end third-party cybersecurity risk review process from intake through reporting.
• Review assessments to identify gaps, residual risks, and remediation needs; advise on risk treatment.
• Support contract negotiations by reviewing cybersecurity addendums and control requirements.
• Partner with Legal, Privacy, Procurement and stakeholders to align risk decisions and governance.
• Analyze risk trends across assessments, vendors, services, and AI capabilities to improve posture.
• Document requirements for AI-enabled risk processes and escalation points.

Kenntnisse

Cybersecurity risk mgmt

Third-party risk mgmt

GxP environments

Analytical skills

Communication skills

AI risk awareness

Ausbildung

Four-year degree or equivalent

Tools

OneTrust

ServiceNow

Jira

Power BI

Excel

SharePoint

Jobbeschreibung

Moderna Digital Core Governance, Risk and Compliance is seeking a Risk Management Analyst to support end-to-end third-party cybersecurity risk reviews across Moderna. You will assess scoping, risk analysis, remediation tracking, risk disposition, governance reporting, and process documentation in a regulated life sciences environment.

You will partner with Legal, Privacy, Procurement, and technical stakeholders to align risk decisions with contract obligations and governance expectations, while