Specialist, Technology Risk Management

Overview

Trusted risk advisor role within the Information Technology Risk Management & Security (ITRMS) organization, supporting cybersecurity, information risk and compliance alignment with the Research Laboratories Business Unit.

What you'll do

• Support risk advisory engagements for IT and business teams across research, development, clinical trials operations, regulatory activities, and related enabling functions.
• Translate cybersecurity and compliance requirements into clear, practical actions for product teams, application owners, project teams, and business stakeholders.
• Participate in planning forums, product discussions, and program governance activities to identify security, privacy, data integrity, and compliance considerations early in the lifecycle.
• Prepare concise risk summaries, decision options, and status updates for review by BIRO leadership and stakeholders.
• Support maintenance of risk registers, including risk statements, ownership, treatment plans, target dates, residual risk, and evidence of closure.
• Assist business and technology owners in evaluating risk treatment options, including mitigation, compensating controls, exception requests, acknowledgement, transfer, or acceptance, in accordance with enterprise requirements.
• Track remediation commitments, follow up with accountable owners, validate supporting evidence, and escalate overdue or material items through the appropriate BIRO lead.
• Support reviews of architecture, solution design, and operational controls, including identity and access, configuration, vulnerability management, data protection, integration security, backup, recovery, and business continuity.
• Contribute to Crown Jewel application governance by coordinating control reviews, risk posture updates, remediation tracking, and readiness activities.
• Assist with risk analysis for emerging technologies and innovation, including artificial intelligence, machine learning, advanced analytics, cloud platforms, laboratory technologies, and external data exchange.
• Partner with cybersecurity and technology subject-matter experts to clarify control requirements and document practical remediation recommendations.
• Support compliance and assurance activities, including control testing, audits, inspections, assessments, and remediation follow-up in regulated environments.
• Help evaluate technology risks affecting GxP-regulated processes, sensitive research and clinical information, privacy obligations, records retention, intellectual property, and data integrity.
• Support security event and incident coordination by gathering facts, documenting business impact, monitoring corrective actions, and connecting stakeholders with the appropriate response teams.
• Contribute to the development and operationalization of security guidance, standards, procedures, and reusable job aids.
• Prepare routine risk reporting and operational updates highlighting risk trends, remediation status, milestones, dependencies, and items requiring leadership awareness.
• Analyze recurring issues and identify opportunities to improve risk processes, stakeholder guidance, controls, reporting, and customer experience.
• Contribute to targeted cybersecurity awareness and training tailored to scientific, clinical, regulatory, and technology work practices.
• Stay informed about relevant cyber threats, regulatory expectations, industry practices, and emerging technologies, and raise potential impacts for review.

What you'll need

• Bachelor's degree in information technology, cybersecurity, computer science, data science, engineering, life sciences, business administration, or a related field, or equivalent relevant experience.
• 3 to 6 years of experience.
• Experience or demonstrated foundational knowledge in cybersecurity, technology risk management, IT compliance, IT audit, privacy, quality, or a related field.
• Foundational understanding of security controls, technology risks, vulnerabilities, data protection, and risk treatment concepts.
• Ability to analyze information, identify gaps, organize evidence, and produce clear, prioritized, and actionable recommendations.
• Ability to explain technical and compliance topics in understandable business language.
• Strong written and verbal communication, organization, follow-through, and attention to detail.
• Ability to collaborate across scientific, clinical, regulatory, technology, privacy, quality, legal, procurement, and cybersecurity teams.
• Comfort working independently on defined assignments while seeking guidance appropriately for complex or material risk decisions.
• Adaptability, learning agility, sound judgment, and a practical, service-oriented approach.
• High integrity and discretion when handling sensitive research, clinical, regulatory, security, and business information.

Nice to have

• Experience supporting risk assessments, control reviews, remediation tracking, or compliance activities.
• Experience in a regulated industry, particularly pharmaceuticals, life sciences, healthcare, research, clinical operations, or manufacturing.
• Exposure to cloud, application, data, AI, laboratory, or operational technology security.
• Entry-level or developing certifications in cybersecurity, risk, audit, privacy, cloud, project management, or data governance.
• Advanced certifications such as CISSP, CISM, CISA, or CRISC.
• Certifications such as Security+, CISSP, CISM, CISA, CRISC, or similar.

Details

• Location: Hyderabad, Telangana, India (Hitec City Raidurg).
• Flexible work arrangement: Hybrid.
• Employee status: Regular.
• Domestic relocation applicable; no visa sponsorship.
• No travel required.
• Shift: Not indicated.
• Job posting end date: 11/5/2026.