Some switchers come with a built in failsafe e.g. Engel, Thunder Tiger and Bruggen relay switchers. Subtech failsafe is a good choice, as it has a nice long delay to prevent minor signal hiccups upsetting your trim.
Also worth looking at something to prevent over pressurisation of the ballast tank/bag. Best IMO is a mechanical relief valve t'd in between the pump and the tank which vents any water outside. I'm not aware of any commercial solution so you will have to construct your own. Or you can use a pressure switch which is fitted in a similar manner but cuts the electrical feed to the pump once a certain pressure is reached. You can obtain them from Norbert Bruggen.
Without that failsafe you could end up in a situation where if the pump stayed on, the pump will first blow you bag, then continue to pump water until it blows your dive module. The chance of this happening is remote, but factor in sods law, and the probability narrows considerably.