IT Strategic Risk & Audit Manager

Roche is a global healthcare company with more than 100,000 employees dedicated to advancing science and providing healthcare solutions. Their efforts have treated over 26 million people with medicines and conducted over 30 billion tests using Diagnostics products.

• 15+ years of experience in IT Risk/Audit, preferably within global, highly regulated industries such as Pharma, MedTech, or Finance.
• Deep mastery of GxP (GLP, GCP, GMP), Computer System Validation (CSV), and Data Integrity principles (ALCOA+).
• Expert knowledge of global risk frameworks (NIST, ISO 27001, COBIT) and privacy regulations (GDPR, HIPAA).
• Strong understanding of modern technology stacks including Cloud Security (AWS, Azure), AI/ML governance, and Agile/DevSecOps methodologies.
• Experience presenting to and influencing executive leadership and Board-level stakeholders.
• Proven ability to navigate complex global matrixed environments and steer senior leadership toward risk-aware decisions.
• Mandatory possession of at least two certifications among CISA, CRISC, CISM, or CISSP.

• Define and architect the global IT Enterprise Risk Management framework (NIST, ISO 27001, COBIT) aligning with Roche's risk appetite.
• Lead analysis of highly complex business and risk challenges proactively to mitigate future risks.
• Identify and engage key stakeholders at executive level, leading risk, audit, and compliance initiatives and securing strategic alignment.
• Lead full lifecycle of complex IT audits and continuous monitoring programs ensuring global regulatory compliance.
• Serve as primary IT liaison during complex Health Authority inspections (FDA, EMA), coaching SMEs and ensuring quality evidence delivery.
• Audit and enforce data integrity principles (ALCOA+) to maintain integrity of regulated data.
• Lead enterprise-wide risk initiatives and develop remediation CAPAs with IT owners to drive transformative impact.