Senior GRC Analyst

1 Month ago • 3-5 Years

Job Summary

Job Description

The Senior GRC Analyst will lead initiatives to identify, assess, and mitigate risk, while ensuring adherence to internal policies and external regulatory requirements. This role involves developing and maintaining frameworks, controls, and processes for a secure and compliant operating environment. The ideal candidate needs strong analytical skills, deep GRC expertise, and the ability to translate complex concepts into actionable approaches. This role requires engagement across functions including leadership, IT, HR, Finance, Commercial, and external stakeholders.

Must have:

Drive and support GRC initiatives across business and technical domains
Partner with GRC leadership to deliver strategic and operational risk and compliance objectives
Maintain and enhance policies, procedures, and controls
Monitor compliance through internal and third-party assessments
Identify and execute on opportunities to improve compliance processes
Manage and maintain documentation for policies, controls, and risk assessments
Coordinate and support internal and external audit activities
Conduct risk assessments and vendor evaluations
Leverage GRC tools and technologies
Stay abreast of regulatory developments and emerging risks
Serve as a liaison with stakeholders
Champion compliance awareness and best practices

Good to have:

Experience in the life sciences or pharmaceutical consulting sector is a plus.
Professional certifications (e.g., CISA, CRISC, CISSP, CIPM) are a plus.

3 skills required

3 skills required for this role

Add these skills to join the top 1% applicants for this job

communication

risk-management

quality-control

Job Details

For over 30 years, Beghou Consulting has been a trusted adviser to life science firms. We combine our strategic consulting services with proprietary technology to develop custom, data-driven solutions that allow life sciences companies to take their commercial operations to new heights. We are dedicated to client service and offer a full suite of consulting and technology services, all rooted in advanced analytics, to enhance commercial operations and boost sales performance.

Purpose of Job

The Senior GRC Analyst is instrumental in advancing Beghou’s governance, risk management, and compliance efforts. This role leads initiatives to proactively identify, assess, and mitigate risk, while ensuring rigorous adherence to internal policies and external regulatory requirements. As a key advisor across business and technology functions, the Senior GRC Analyst develops and maintains robust frameworks, controls, and processes that enable a secure and compliant operating environment.

The ideal candidate brings strong analytical skills, deep GRC expertise, and the ability to translate complex regulatory and risk concepts into clear, actionable approaches. This role requires engagement across functions, including leadership, IT, HR, Finance, Commercial, and external stakeholders.

We'll trust you to:

Drive and support Beghou’s GRC initiatives across both business and technical domains.
Partner with GRC leadership to deliver strategic and operational risk and compliance objectives.
Maintain and enhance policies, procedures, and controls in alignment with industry best practices, client requirements, and applicable regulations.
Monitor compliance with Beghou’s internal standards through internal and third-party assessments.
Identify and execute on opportunities to improve compliance processes and align with evolving frameworks.
Manage and maintain documentation for policies, controls, compliance activities, and risk assessments.
Coordinate and support internal and external audit activities, including evidence collection and response management.
Conduct risk assessments and vendor evaluations and manage associated mitigation and remediation plans.
Leverage GRC tools and technologies to streamline documentation, risk tracking, evidence management, and audit support.
Stay abreast of regulatory developments and emerging risks affecting Beghou and its clients.
Serve as a liaison with business and technical stakeholders, as well as clients, auditors, and regulators.
Champion compliance awareness and best practices through training and internal engagement.

You'll need to have:

Bachelor’s degree or higher from an accredited institution.
Minimum of 3 years of direct GRC experience (policy, risk, audits, assessments) and 5+ years of overall professional experience.
Strong knowledge of formal assessment frameworks (SOC, ISO 27001, NIST).
Familiarity with global data privacy and cybersecurity laws (e.g., GDPR, HIPAA, CCPA, GxP).
Demonstrated ability to manage multiple workstreams simultaneously and independently.
Excellent verbal and written communication skills with the ability to engage both technical and non-technical audiences.
Strong organizational skills and a methodical approach to problem-solving.
Experience in the life sciences or pharmaceutical consulting sector is a plus.
Professional certifications (e.g., CISA, CRISC, CISSP, CIPM) are a plus.

What you should know:

· We treat our employees with respect and appreciation, not only for what they do but who they are.

· We value the many talents and abilities of our employees and promote a supportive, collaborative, and dynamic work environment that encourages both professional and personal growth.

· You will have the opportunity to work with and learn from all levels in the organization, allowing everyone to work together to develop, achieve, and succeed with every project.

· We have had steady growth throughout our history because the people we hire are committed not only to delivering quality results for our clients but also to becoming leaders in sales and marketing analytics.