GRC Lead :: Onsite

Overview

On Site
Depends on Experience
Contract - W2
Contract - 1 Year(s)
No Travel Required
Able to Provide Sponsorship

Skills

Information Security & Compliance Consultant
SOX
GxP
GDPR
IAPP

Job Details

Role Overview

Information Security & Compliance Consultant supporting pharmaceutical supply chain and Advanced Therapies (Car-T) IT platforms. Responsible for security controls, risk assessments, and regulatory compliance across global projects.

Key Responsibilities

  • Conduct security risk assessments for supply chain and Advanced Therapies applications

  • Provide security consulting to ensure Minimum Viable Security (MVS)

  • Implement and monitor application security controls (change, incident, access management)

  • Ensure compliance with SOX, GxP, GDPR, IAPP, and internal policies

  • Advise business and IT teams on secure system design and regulatory needs

  • Perform incident trending, vulnerability assessments (static/dynamic), and remediation planning

  • Maintain security metrics, risk dashboards, and assessment status reports

  • Act as central security contact and coordinate with ISRM teams

  • Oversee interns/contractors and support key security initiatives

Required Qualifications

  • Bachelor’s degree in IT / Computer Science

  • 7+ years in application security and controls consulting

  • Strong knowledge of web/cloud applications, SOX, and security principles

  • Excellent communication and documentation skills

Preferred Skills

  • Certifications: CISSP, CISM, CISA

  • Pharma systems security experience

  • Knowledge of Car-T, GxP, GDPR, privacy, and risk management

Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.

About Trebecon LLC