> Markdown version of [/jobs/ext/1868247-it-grc-specialist](https://www.wearedevelopers.com/jobs/ext/1868247-it-grc-specialist). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# IT GRC Specialist

- **Company:** Mundipharma
- **Location:** Cambridge, UK
- **Contract:** Permanent contract
- **Skills:** Artificial Intelligence, Control Objectives for Information and Related Technology (COBIT), Learning Management Systems, Document Management Systems, Information Technology Audit, IT Management, Information Technology Operations, Sharable Content Object Reference Model, RSA Archer Platform
- **Published:** August 2, 2026
- **Apply:** https://www.careerjet.co.uk/job/gb7fcfb841a621f1c684ac697051375945/eaa

## About the Role

University or Master's degree in IT (or related field), backed by proven experience managing risks within an IT organisation.
Previous experience in an IT Governance, Risk & Compliance (GRC) related position in the Pharmaceutical industry would be advantageous but other industries would be considered.
Deep understanding of audit operations and a track record of successfully managing responses to both internal and external audits.
Sound knowledge of core GRC practices and industry frameworks, such as ISO 27001, ISO 9001, ITIL, and COBIT.
Document & Quality Control - Expertise in quality management principles, policy governance, and administering Document Management Systems.
Experience using GRC platforms like Vanta (preferred) and creating SCORM-compliant training content with Articulate would be advantageous.
Practical experience implementing ITIL processes and collaborating directly with cybersecurity teams to mitigate risk.
Excellent negotiation and global stakeholder relationship-building skills with the ability to influence management-level stakeholders in a global environment.
Process-Driven Improvement: Strong process mindset with a proven ability to spot improvement opportunities and lead them through to completion.
Agile & Collaborative Mindset - Adaptable, solution-focused team player who enjoys learning new skills and driving a positive impact across the business.

## Description

The IT Governance, Risk & Compliance (GRC) Specialist will join the IT team at Mundipharma ensuring the organisation understands its key risks and manages them appropriately in line with its risk appetite, while maintaining effective governance, controls, and oversight. Translating requirements into practical, proportionate controls embedded across business and technology processes, and ensures suitable evidence is maintained to demonstrate compliance and control effectiveness.
Role and Responsibilities
Lead the end-to-end IT risk management practice, ensuring legal obligations are met and enterprise risks are detailed, owned, mitigated, and clearly communicated to leadership.
AI Governance & Risk Management - Establish and oversee AI risk frameworks, ensuring the responsible, transparent, and compliant use of AI technologies across all organizational use cases.
Policy Framework & Governance: Maintain and review IT policies, partnering with department heads to identify documentation gaps, execute review cycles, and drive continuous policy improvement.
Conduct regular audits of internal IT processes to verify compliance with governance frameworks and implement structured remediation plans.
Act as the primary point of contact for internal and external IT audits, coordinating with system owners to deliver consistent responses while minimizing operational disruption.
Identify, track, and remediate potential audit risks and control weaknesses proactively to prevent formal audit findings.
Build and sustain strong working relationships with internal audit teams to ensure ongoing alignment between IT operations and enterprise governance goals.
Manage and administer IT governance, security, and policy training programs across IT and the wider business via the Global Learning Management System (LMS).
Support the development of engaging training content and deliver regular compliance reporting against key performance indicators.
Maintain macro- and micro-level risk reporting for IT leadership while collaborating with global training and compliance teams to adopt best practices.
What you'll bring


## Related Videos

- [Blueprints for Success: Steering a Global Data & AI Architecture](https://www.wearedevelopers.com/videos/1577-blueprints-for-success-steering-a-global-data-ai-architecture)
- [Your Manager Doesn’t Come with a User Manual (But You Can Totally Write One)](https://www.wearedevelopers.com/videos/1495-your-manager-doesn-t-come-with-a-user-manual-but-you-can-totally-write-one)
- [Edit Your Future: Queerverse Radical AI](https://www.wearedevelopers.com/videos/909-edit-your-future-queerverse-radical-ai)
- [Engineering/Manager Pendulum: Generating compound interest on your career](https://www.wearedevelopers.com/videos/100348-engineering-manager-pendulum-generating-compound-interest-on-your-career)
- [AI is dead, long live AK](https://www.wearedevelopers.com/videos/1093-ai-is-dead-long-live-ak)
- [One Pipeline, Three Regulator - SBOM Compliance for the Developer](https://www.wearedevelopers.com/videos/100169-one-pipeline-three-regulator-sbom-compliance-for-the-developer)

## Related Articles

- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [System change: restart as developer?](https://www.wearedevelopers.com/magazine/39-system-change-restart-as-developer)
- [Coffee with Developers - Maria Apazoglou - Making AI understandable for all in production](https://www.wearedevelopers.com/magazine/475-coffee-with-developers-maria-apazoglou-making-ai-understandable-for-all-in-production)
- [UK Business Culture and Etiquette](https://www.wearedevelopers.com/magazine/326-uk-business-culture-and-etiquette)
- [Résumé-Driven Development: How IT trends affect the job market for software developers](https://www.wearedevelopers.com/magazine/59-resume-driven-development-how-it-trends-affect-the-job-market-for-software-developers)
- [A Guide to Green Tech and Green IT Careers](https://www.wearedevelopers.com/magazine/374-a-guide-to-green-tech-and-green-it-careers)