Senior Associate, GRC Automation and Analytics Developer

About the role

Pfizer's Global Governance, Risk and Compliance (GRC) team embeds governance, risk management and compliance into every layer of the organisation and ensures risk-based decisions are used. It is looking for a Senior Associate, GRC Automation and Analytics Developer who will scale and modernise Cyber GRC capabilities through technology platforms, data analytics, metrics and workflow automation. The role is hybrid, based in Thessaloniki, Greece.

Key responsibilities

• Support and enhance the GRC technology platform (e.g. Archer) used for risk management, compliance, issues and exceptions management and reporting.
• Support workflow automation, data feeds and integrations with upstream and downstream systems (e.g. vulnerability management, asset management, ISAM).
• Design, develop and maintain GRC metrics, dashboards and KPIs for leadership, governance forums and regulatory readiness.
• Analyse data across risk, compliance, controls, exceptions and issues to find trends and areas for improvement.
• Ensure metrics are accurate and aligned to enterprise risk and compliance objectives, and that solutions comply with frameworks such as NIST, SOX and GxP.
• Identify opportunities to automate manual or repetitive Cyber GRC processes and assist with platform upgrades, integrations and UX improvements.
• Maintain documentation for configurations, data definitions, metrics logic and automated workflows, and work with Cyber, IT, Engineering, Privacy, Internal Audit and business teams.

Required profile

• Bachelor's degree in information technology, cybersecurity, computer science or a related field.
• 2+ years of experience in information technology or cybersecurity.
• Experience with GRC systems and with frameworks such as NIST Cybersecurity Framework or ISO 27001.
• Experience in an agile environment, with strong written communication and collaboration skills.
• Preferred: pharmaceutical or other highly regulated industry experience, and certifications such as CISSP, CISM, CRISC, CISA or PMP.

Required skills

• Dashboards with Power BI, Tableau or similar.
• Preferred: scripting or programming languages such as Python or PowerShell, and familiarity with ServiceNow GRC, Archer, Power BI and Tableau.

What we offer

• Annual base salary ranging from EUR 21,000 for the Thessaloniki location.
• Benefits that may include healthcare coverage, retirement savings plans, insurance, an Employee Assistance Program and wellness benefits, varying by location.