Engineer, GRC

Description

About Norstella

At Norstella, our mission is simple: to help our clients bring life-saving therapies to market quicker—and help patients in need.

Founded in 2022, but with history going back to 1939, Norstella unites best-in-class brands to help clients navigate the complexities at each step of the drug development life cycle —and get the right treatments to the right patients at the right time.

Each Organization (Citeline, Evaluate, MMIT, Panalgo, The Dedham Group) Delivers Must-have Answers For Critical Strategic And Commercial Decision-making. Together, Via Our Market-leading Brands, We Help Our Clients

• Citeline – accelerate the drug development cycle
• Evaluate – bring the right drugs to market
• MMIT – identify barrier to patient access
• Panalgo – turn data into insight faster
• The Dedham Group – think strategically for specialty therapeutics
  
  

By combining the efforts of each organization under Norstella, we can offer an even wider breadth of expertise, cutting-edge data solutions and expert advisory services alongside advanced technologies such as real-world data, machine learning and predictive analytics.

As one of the largest global pharma intelligence solution providers, Norstella has a footprint across the globe with teams of experts delivering world class solutions in the USA, UK, The Netherlands, Japan, China and India.

Responsibilities

• Manages regulatory obligations within assigned areas, preparing reports and engaging with auditors.
• Drafts and maintains policies or procedures for assigned domains, ensuring traceability to controls.
• Performs independent risk assessments and maintains risk registers for assigned areas.
• Leads internal audit execution, designs test plans, and validates remediation outcomes.
• Manages vendor reviews, executes questionnaires, and coordinates follow-up actions. March 2026
• Reviews system designs for compliance alignment and documents control requirements.
• Creates domain-specific training content and delivers sessions to operational teams.
• Applies governance frameworks to assigned AI/ML initiatives, supporting bias and privacy reviews. Qualifications
• BA/BS or equivalent experience; relevant certifications preferred.
• Typically, 3+ years in GRC or related fields, or equivalent capability through ownership of domain-level compliance or risk programs.
• Proficient in applying frameworks to assigned programs and coordinating evidence requirements.
• Working knowledge of industry requirements, applying them to assigned systems or data.
• Proficient in conducting audits, documenting results, and driving remediation.
• Proficient in executing risk analyses and maintaining risk registers.
• Proficient in designing reports for stakeholders using BI tools.
• Proficient in drafting and updating control narratives and domain-specific policies.
• Working knowledge in applying AI/ML governance at the project level, ensuring bias and privacy protections.
  
  

Our Guiding Principles For Success At Norstella

01: Bold, Passionate, Mission-First 

02: Integrity, Truth, Reality

03: Kindness, Empathy, Grace

04: Resilience, Mettle, Perseverance

05: Humility, Gratitude, Learning

Benefits

• Health Insurance
• Provident Fund
• Reimbursement of Certification Expenses
• Gratuity
• 24x7 Health Desk
  
  

Norstella is an equal opportunity employer. All job applicants will receive equal treatment regardless of race, creed, color, religion, alienage or national origin, ancestry, citizenship status, age, physical or mental disability or handicap, medical condition, sex (including pregnancy and pregnancy-related conditions), marital or domestic partner status, military or veteran status, gender, gender identity or expression, sexual orientation, genetic information, reproductive health decision making, or any other protected characteristic as established by federal, state, or local law.

Sometimes the best opportunities are hidden by self-doubt. We disqualify ourselves before we have the opportunity to be considered. Regardless of where you came from, how you identify, or the path that led you here- you are welcome. If you read this job description and feel passion and excitement, we're just as excited about you.

All legitimate roles with Norstella will be posted on Norstella's job board which is located at norstella.com/careers. If a role is not posted on this job board, a candidate should assume the role is not a legitimate role with Norstella. Norstella is not responsible for an application that may be submitted by or through a third-party and candidates should proceed with extreme caution if a third-party approaches them about an open role with Norstella. Norstella will never ask for anything of value or any type of payment during or as part of any recruitment, interview, or pre-hire onboarding process. If you are aware of or have reason to believe a job posting purportedly for a role with Norstella is fraudulent or otherwise not authorized by Norstella, please contact the Company using the following email address: [HIDDEN TEXT].