At Roche you can show up as yourself, embraced for the unique qualities you bring. As the IT Strategic Risk & Audit Manager, you will play a pivotal role in ensuring that our digital evolution—from AI-driven drug discovery to personalized healthcare apps—is built on a foundation of trust and resilience. You will act as a strategic partner to Digital Technology leaders, ensuring that risks are managed proactively rather than reactively.
Scope / (Content Leadership): Defines the strategic vision for IT risk, audit, and compliance, and drives strategic initiatives for long-term risk management success. Initiates and leads large, complex projects with a significant impact on the organization. Strategic Risk Architecture & Vision: Define and architect the global IT Enterprise Risk Management (ERM) framework (NIST, ISO 27001, COBIT), aligning long-term digital strategy with Roche's risk appetite to ensure "Compliance by Design" across complex, interconnected global portfolios.
Leads the analysis of highly complex business and risk challenges with significant organizational impact, proactively identifying potential strategic issues within your sphere of influence. Contributes to framing strategic questions and facilitates strategic decision-making at the executive level.
Identifies and engages key stakeholders at the executive level and external partners, analyzing enterprise-wide stakeholder landscapes. Leads enterprise-wide risk, audit, and compliance initiatives, presenting them to executive leadership to secure support and strategic alignment for risk-related investments. E2E Audit & Compliance Leadership: Lead the full lifecycle of complex IT audits and continuous monitoring programs across infrastructure and applications, ensuring the organization meets global regulatory requirements while proactively identifying systemic issues to prevent recurrence.




Inspection Command & Control: leading "Front-Room/Back-Room" operations, coaching SMEs in regulatory interview techniques, and ensuring the rapid delivery of high-quality, validated evidence.
Data Integrity & ALCOA+ Systematically audit and enforce the "Digital Thread" to ensure all health-regulated data remains Attributable, Legible, Contemporaneous, Original, and Accurate, maintaining the integrity of life-saving digital health solutions.
Global Stakeholder & Transformation Management: Navigate sensitive landscapes to lead enterprise-wide risk initiatives, partnering with IT owners to develop robust remediation CAPAs and innovating risk management approaches to drive lasting, transformative impact across the integral organization.
15+ years of experience in IT Risk/Audit, preferably within a global, highly regulated industry (Pharma, MedTech, or Finance).
~ Deep mastery of GxP (GLP, GCP, GMP), CSV (Computer System Validation), and Data Integrity principles (ALCOA+).
~ Expert knowledge of global risk frameworks (NIST, ISO 27001, COBIT) and privacy regulations (GDPR, HIPAA).
~ Strong understanding of modern technology stacks, including Cloud Security (AWS/Azure), AI/ML governance, and Agile/DevSecOps methodologies.
~ Proven ability to navigate a complex, global matrixed environment and steer senior leadership toward risk-aware decision-making through technical credibility.
~ Together, more than 100'000 employees across the globe are dedicated to advance science, ensuring everyone has access to healthcare today and for generations to come. Our efforts result in more than 26 million people treated with our medicines and over 30 billion tests conducted using our Diagnostics products. We empower each other to explore new possibilities, foster creativity, and keep our ambitions high, so we can deliver life-changing healthcare solutions that make a global impact.

📌 Manager/Senior Audit Manager (Madrid)
🏢 Meraki Talent
📍 Madrid