Listed on Moderna’s own careers site. You apply with them directly — we never stand between you and the employer.
What this role is
A Third Party Risk Analyst role within Moderna's governance and compliance organization, responsible for managing cybersecurity risk assessments of external vendors and partners in a regulated pharmaceutical environment. The position suits experienced risk professionals who can evaluate complex security controls, influence stakeholders across departments, and help mature enterprise risk management practices for a rapidly growing biotech company.
Our summary, not Moderna’s wording. The full posting is on their site.
Skills this role names
Log in to see which of these are already on your profile.
What they ask for
Required
- 5+ years in third-party risk management or GRC
- Experience owning third-party cybersecurity risk reviews including assessment analysis and remediation tracking
- Experience in GxP-regulated environments
- Sound judgment to escalate risks and drive timely decisions
- Strong written and verbal communication skills
- Experience using AI to optimize risk analysis or workflow management
- Ability to operate in matrixed environments and influence without direct authority
Nice to have
- Four-year degree in information systems, cybersecurity, or risk management
- Familiarity with third-party risk frameworks such as NIST CSF, ISO 27001, CIS Controls, or CAIQ
- Experience with GRC tools like OneTrust, ServiceNow, Jira, Power BI, or Excel
- Strong attention to detail and commitment to data integrity
- Track record of service improvement and continuous enhancement