Information Security GRC Specialist

About the company

Why Join Us? Join our team at BostonGene, where your work makes a real difference! As a pioneering biotech company with a global footprint, we're passionate about improving lives through groundbreaking oncology personal healthcare. With a team of over 500 dedicated professionals, we foster an empowering environment where your unique skills contribute to a healthier, better world. At BostonGene, you're not just choosing a career; you're stepping into a role that leverages your talents to create a positive change. Discover a workplace that values you as its most precious asset, offering a competitive benefits package designed to enhance your life and those around you.

Your tasks

We are seeking a Information Security GRC Specialist to support and enhance our information security governance, risk management, and compliance programs across enterprise systems, cloud platforms, and IT infrastructure. This position partners cross-functionally with Product, Software Development, and QA/RA teams to identify and assess information security risks, maintain security policies and controls, and ensure alignment with cybersecurity standards and regulatory requirements.

• Support the implementation, maintenance, and continuous improvement of information security governance, risk management, and compliance processes;
• Conduct information security risk assessments, maintain risk registers, and track risk treatment and remediation activities;
• Develop, review, and maintain information security policies, procedures, standards, and supporting documentation;
• Support implementation and ongoing compliance with information security frameworks and standards, including ISO 27001, SOC 2, and NIST;
• Perform security compliance gap assessments and monitor corrective actions to ensure timely resolution of identified deficiencies;
• Support periodic reviews of information security controls, including access management, asset management, data protection, and other security-related processes;
• Collaborate with IT, Software Development, Product, and QA/RA teams to identify security risks and support implementation of appropriate security controls.

Requirements

The ideal candidate will bring strong analytical, organizational, and communication skills, with experience in information security risk assessments, security compliance monitoring, policy management, and security audits, helping maintain a secure, compliant, and audit-ready environment

• Bachelor's degree in Cybersecurity, Information Security, Information Technology, Computer Science, or a related field, or equivalent practical experience;
• Professional experience in Information Security GRC, IT Risk Management, Security Compliance, or Information Security Auditing;
• Familiarity with GRC and risk management tools;
• Knowledge of cybersecurity frameworks and standards, including ISO 27001, SOC 2, NIST, and HIPAA, etc.;
• Experience with security risk assessments, policy management, compliance monitoring, and audit preparation;
• Understanding of security controls related to access management, vulnerability management, cloud security, and data protection;
• Strong analytical, organizational, documentation, and communication skills;
• Experience in regulated industries such as biotechnology, healthcare, or life sciences is preferred;
• Relevant certifications, such as ISO 27001 Internal/Lead Auditor, CISA, CRISC, or CISM, are preferred;
• Fluency in English and Russian, both written and spoken.

What we offer

• Full-time position with a permanent contract and flexible working hours, with hybrid work options.
• Competitive salary and comprehensive healthcare insurance.
• Convenient office location in Yerevan (1-minute walk from the metro) with on-site snacks.
• Relocation package for candidates and their immediate family members, including full documentation and bureaucracy support (bank accounts, residence permits, school contacts, etc.).
• Corporate benefits, including English language lessons and gym membership.
• Dynamic and versatile professional environment with a diverse team of bioinformaticians, biologists, physicians, and software developers committed to improving oncological healthcare.
• Careful, structured, and responsible supervision to support professional growth.