Beigene · Warsaw, PolandPrepare for this interview
EliteAI-generated questions, company research, and talking points tailored to this role
BeOne continues to grow at a rapid pace with challenging and exciting opportunities for experienced professionals. When considering candidates, we look for scientific and business professionals who are highly motivated, collaborative, and most importantly, share our passionate interest in fighting cancer. BeOne is seeking a Senior Analyst of GTS (Global Technology Solutions) GRC (Governance, Risk and Compliance) to help build, enable and transform its risk management, compliance and security capabilities and resources in the European region. The GTS GRC Senior Analyst supports the Europe GTS GRC Senior Manager from a technology and security perspective across the organization. This position will be responsible for building and enhancing the GRC portfolio of efforts to raise the overall security and compliance posture for BeOne. This position will also be involved in implementing, maintaining and improving policies, procedures and internal controls to ensure compliance with applicable regulatory and legal requirements as well as best practices. The GTS GRC Senior Analyst will drive risk analysis for internal and external third-party risk assessments by designing controls and implementing industry best practice processes for teams and technologies utilized across the organization. The role will work across multiple frameworks and regulatory standards including, but not limited to SOX, GxP, ISO, NIST CSF, GDPR, NIS 2, AI and other EU oriented data security & privacy laws and regulations. This position will liaise with all business groups including but not limited to Finance, Legal, Compliance, Clinical, Quality and other stakeholders in Europe region to implement new solutions and processes as well as document and remediate outstanding issues. Essential Functions of the job : Conduct internal IT, Cybersecurity, and third-party information security risk management activities for various information services systems and processes including IT SOX and GxP compliance. Support efforts including but not limited to: Policy Management, IT Compliance Management, Training & Awareness Management, SDLC, IT Risk Management and Vendor Security Risk Management. Support external and internal audits. Implement controls to build and enhance the GRC program. Monitor, remediate, and report controls gaps in the IT and Cybersecurity program areas. Provide management level status update and risk profile dashboards including current and desired future state of control maturity. Collaborate with IT and business stakeholders to understand risks to critical infrastructure by defining potential business impacts. Assess, report and mature the compliance posture for internal policies and guidelines as well as regulatory requirements based on frameworks including ISO, NIST CSF, GDPR, NIS 2, AI and other EU oriented data security & privacy laws and regulations. Maintain, improve, and enforce BeiGene security policies and IT security standards along with security exception processes. Effectively engage IT, stakeholders, business partners, and vendors to maintain an understanding of current risks, new systems, and changes to the environment.
How well this role fits your profile.
Worked at beigene? Share your experience