ph3IT Strategic Risk Audit Manager /h3pAt Roche, you will play a pivotal role in ensuring that our digital evolution—from AI‑driven drug discovery to personalized healthcare apps—is built on a foundation of trust and resilience. You will act as a strategic partner to Digital Technology leaders, ensuring that risks are managed proactively and that our global digital strategy incorporates best practices in risk, audit, and compliance. /ph3Responsibilities /h3ulliDefine the strategic vision for IT risk, audit, and compliance, and drive strategic initiatives for long‑term risk management success. /liliInitiate and lead large, complex projects with significant impact on the organization. /liliLead the development of enterprise‑wide risk and compliance policies and advise on emerging trends and best practices. /liliDefine and architect the integral IT Enterprise Risk Management (ERM) framework (NIST, ISO 27001, COBIT), aligning long‑term digital strategy with Roche’s risk appetite. /liliLead analysis of highly complex business and risk challenges with significant organizational impact, proactively identifying potential strategic issues. /liliDevelop comprehensive risk management and compliance policies, implement proactive measures to avoid repeated issues, and lead initiatives to anticipate and mitigate future risks. /liliContribute to framing strategic questions and facilitate strategic decision‑making at the executive level. /liliIdentify and engage key stakeholders at the executive level and external partners, analyze enterprise‑wide stakeholder landscapes, and secure support and strategic alignment for risk‑related investments. /liliNavigate highly complex and politically sensitive landscapes, act as an organizational trust builder, and provide expert counsel on critical strategic decisions. /liliLead the full lifecycle of complex IT audits and continuous monitoring programs across infrastructure and applications,



ensuring global regulatory compliance and proactively identifying systemic issues. /liliServe as the primary IT liaison during complex Health Authority inspections (FDA, EMA, etc.), lead “Front‑Room/Back‑Room” operations, coach SMEs in regulatory interview techniques, and ensure rapid delivery of high‑quality evidence. /liliSystematically audit and enforce the “Digital Thread” to ensure all health‑regulated data remains Attributable, Legible, Contemporaneous, Original, and Accurate, maintaining data integrity. /liliPartner with IT owners to develop robust remediation CAPAs and innovate risk‑management approaches, driving lasting, transformative impact across the global organization. /li /ulh3Qualifications /h3ulli15+ years of experience in IT Risk/Audit, preferably within a global, highly regulated industry (Pharma, MedTech, or Finance). /liliDeep mastery of GxP (GLP, GCP, GMP), CSV (Computer System Validation), and Data Integrity principles (ALCOA+). /liliExpert knowledge of global risk frameworks (NIST, ISO 27001, COBIT) and privacy regulations (GDPR, HIPAA). /liliStrong understanding of modern technology stacks, including Cloud Security (AWS/Azure), AI/ML governance, and Agile/DevSecOps methodologies. /liliDemonstrated experience presenting to and influencing Executive Leadership (C‑suite) and Board‑level stakeholders. /liliProven ability to navigate a complex, global matrixed environment and steer senior leadership toward risk‑aware decision‑making through technical credibility. /liliDrive a culture of shared accountability, ensuring compliance and risk management are viewed as strategic enablers. /li /ulh3Certifications /h3pMandatory possession of at least two of the following: CISA, CRISC, CISM, or CISSP. /ph3Location /h3pPrimary location: Madrid. /ppWhere pay transparency applies, compensation details are provided based on the primary posting location. /ph3Equal Opportunity Employer /h3pRoche is an Equal Opportunity Employer. /p /p #J-18808-Ljbffr

📌 IT Strategic Risk & Audit Manager (Madrid)
🏢 F. Hoffmann-La Roche
📍 Madrid