[Hiring] Governance, Risk and Compliance Project Manager @Worldwide Clinical Trials

Role Description

The Governance, Risk and Compliance (GRC) Project Manager is a key member of the Governance, Risk and Compliance team, reporting to the Sr. Director of Governance, Risk and Compliance function. This role is responsible for working with the Office of the CISO (OCSIO) team and for leading complex information security initiatives from planning through implementation and operational transition.

• Independently lead information security projects from initiation through closure, including defining objectives, scope, deliverables, milestones, resource needs, success measures, and acceptance criteria.
• Convert security strategies, risk treatment plans, audit findings, regulatory commitments, and operational needs into executable project plans with clear ownership, dependencies, and timelines.
• Maintain schedules, action logs, decision records, risk and issue registers, budgets, status reports, and project documentation.
• Bring together Information Security, Information Technology, Privacy, Legal, Quality, Vendor Management, Procurement, Clinical Operations, and other business functions to achieve agreed outcomes in a matrixed environment.
• Work effectively with security architects, engineers, analysts, and technology owners; understand technical designs, implementation constraints, control requirements, and operational impacts sufficiently to challenge assumptions and keep delivery on track.
• Identify risks to delivery and security outcomes early, assess their impact, establish mitigation and contingency actions, and escalate material decisions with clear options and recommendations.
• Ensure projects follow applicable Office of the CISO governance, security, privacy, quality, change-management, and documentation requirements.
• Provide concise, accurate updates on progress, decisions, risks, financials, and expected outcomes.
• Explain security and technology matters in practical business terms and connect project decisions to patient, sponsor, regulatory, operational, and client considerations within a clinical research organization.
• Coordinate third parties supporting security initiatives, including deliverables, dependencies, performance, security obligations, and issue resolution.
• Plan stakeholder engagement, communications, training, implementation readiness, and transition to operations.
• Maintain reliable project data and contribute to Office of the CISO portfolio dashboards, capacity planning, prioritization, and leadership reporting.
• Apply lessons learned, improve delivery practices and templates, and help establish consistent project management standards across the information security portfolio.
• Perform other duties as assigned.

Qualifications

• Establishes structure, makes sound day-to-day decisions, and advances complex work with limited direction.
• Understands information security principles, common technologies, controls, threats, and delivery considerations.
• Builds trust across functions, creates shared accountability, and resolves disagreements constructively.
• Communicates with precision in writing and conversation, listens actively, and adjusts the level of detail to suit different audiences.
• Develops clear, decision-oriented materials and confidently presents project status, risks, recommendations, and outcomes.
• Understands how a clinical research organization operates and connects security work to business priorities.
• Anticipates dependencies, distinguishes urgent activity from important outcomes, and uses evidence to recommend practical courses of action.
• Remains effective when priorities change, information is incomplete, or delivery requires coordination across regions.

Requirements

• Bachelor’s degree in information security, cybersecurity, information technology, business, project management, or a related field.
• Five or more years of project management experience, including demonstrated responsibility for independently delivering multiple information security or cybersecurity projects.
• Documented experience managing security initiatives such as identity and access management, vulnerability remediation, security tooling, cloud security, data protection, third-party risk, security operations, compliance remediation, or security transformation.
• Working knowledge of core information security concepts and common enterprise technology environments.
• Demonstrated experience leading cross-functional teams and vendors through planning, execution, implementation, and transition to operations.
• Strong command of project management practices, including scope, schedule, budget, resources, risks, issues, dependencies, change control, governance, and benefits tracking.
• Excellent written, verbal, facilitation, and presentation skills.
• Proficiency with project planning, collaboration, reporting, and presentation tools.
• Experience in a clinical research organization, life sciences, healthcare, pharmaceutical, or another regulated environment is strongly preferred.
• Project Management Professional (PMP), PRINCE2, Certified ScrumMaster, or comparable project management certification is preferred.
• A security certification such as CISSP, CISM, Security+, or equivalent is beneficial.

Benefits

• Opportunity to work in a collaborative and inclusive environment.
• Access to professional growth and development opportunities.
• Ability to contribute to meaningful work that helps bring life-changing therapies to patients.

Company Description

At Worldwide Clinical Trials, we're driven by a shared commitment to improving lives through high-quality clinical research. Our teams are empowered to think creatively, take ownership, and deliver meaningful work.