Sr. Associate, GRC Technology, Metrics and Automation

Our Global Governance Risk and Compliance (GRC) team provides comprehensive blueprints for cybersecurity excellence by embedding governance risk management and compliance into every layer. The team is responsible for ensuring risk-based decision-making is used and that security privacy and regulatory compliance is integrated seamlessly with Pfizers organization.

We are seeking a motivated Senior Associate Technology Metrics and Automation who is focused on enabling scaling and modernizing Cyber GRC capabilities through the effective use of technology platforms data analytics metrics and workflow automation. The Senior Associate Technology Metrics and Automation is both technically curious and riskaware with the ability to translate GRC requirements into efficient datadriven and automated solutions that support regulatory compliance risk transparency and informed decisionmaking across the enterprise.

• Support and enhance Pfizers GRC technology platform (e.g. Archer) used for risk management compliance issues and exceptions management and reporting.

• Support the implementation of workflow automation data feeds and integrations with upstream and downstream systems (e.g. vulnerability management asset management ISAM).

• Design develop and maintain GRC metrics dashboards and KPIs to support leadership governance forums and regulatory readiness.

• Analyze data across risk compliance controls exceptions and issues to identify trends insights and areas for improvement.

• Ensure metrics are accurate meaningful and aligned to enterprise risk and compliance objectives.

• Ensure GRC technology solutions support compliance with relevant frameworks and regulations (e.g. NIST SOX GxP).

• Identify opportunities to automate manual or repetitive Cyber GRC processes improving efficiency consistency and auditability.

• Assist with platform upgrades enhancements integrations and user experience improvements.

• Maintain clear documentation for system configurations data definitions metrics logic and automated workflows.

• Work closely with Cyber IT Engineering Privacy Internal Audit and Business teams to enable endtoend GRC processes.

• Bachelors degree in information technology cybersecurity computer science or a related field.

• 2 years of experience in information technology or cybersecurity.

• Experience working with GRC systems.

• Experience with information system frameworks such as NIST Cybersecurity Framework or ISO 27001.

• Strong analytical skills with the ability to work with datasets and translate them into actionable insights.

• Practical experience creating dashboards using tools like Power BI Tableau or other related tools.

• Solid understanding of core cybersecurity principles technologies and risks to effectively collaborate with technical teams and support governance activities.

• Strong ability to produce clear concise and professional written communications and reports.

• Excellent collaboration and interpersonal skills with the ability to work effectively across levels and functions to support program objectives.

• Demonstrated experience in an agile work environment possessing qualities such as a collaborative mindset adaptability to change and a proactive problem-solving approach.

• Demonstrated experience working in pharmaceutical biotech or other highly regulated industries.

• Professional certifications such as CISSP CISM CRISC CISA PMP or similar.

• Experience using scripting or programming languages (e.g. Python PowerShell or similar)

• Familiarity with ServiceNow GRC Archer Power BI Tableau or similar tools.

• Travel as required by the business (less than 20% domestic and/or international)

Please apply by sending your CV in English.

Work Location Assignment:Hybrid

To learn more about acceptable and prohibited uses of AI during the recruitment process please review our candidate AI-use guidelines available onPfizer Careers.