At Roche you can show up as yourself, embraced for the unique qualities you bring. The IT Audit & Inspection Readiness Senior Specialist serves as the primary day-to-day partner, shield, and facilitator for IT/RDT teams and business when navigating internal audits, external certifications, and regulatory inspections. This is not a traditional auditor role focused on testing and issuing findings.

Your objective is to stand shoulder-to-shoulder with technical colleagues, take the operational friction out of audit processes, translate technical implementations into audit-ready evidence, and drive pragmatic issue remediation. Embedded directly within our Governance, Risk, and Compliance (GRC) framework, you will help build an agile evidence repository, build sustainable audit & inspection readiness, and gradually introduce internal control self-assessments (iCSAs) as the capability matures.

Audit

Lifecycle & Inspection Facilitation (End-to-End Orchestration) Single Point of Contact (SPOC): Act as the liaison and cross-coordination between IT/RDT teams and incoming audit or inspection teams.

Intake Management: Triage incoming requests /lists, clarify ambiguous requests with auditors, and eliminate duplicate or out-of-scope demands for proper planning.

Evidence Quality Check: Review and validate requests before submission, verifying they directly answer the auditor's request while safeguarding sensitive data. IT/RDT Compliance Enablement & Sustainable Remediation Audit Artifacts. Standardize request channels, analyze repeated evidence, and manage the audit calendar to prevent operational disruptions and support the teams proactively.

CAPA Partnership: Collaborate with RDT Subject Matters and Practice Owners to perform root-cause analysis (RCA) on audit findings to boost an improvement and quality mindset.

GRC Maintenance: Keep the central GRC tool updated with active audit engagements, artifact repositories, control mappings, and open finding statuses. Self-Assessments & Proactive Checks (Growth Scope): As the reactive audit cycle stabilizes,



partner with teams to run informal, lightweight Control Self-Assessments (iCSAs) against for example baseline frameworks to proactively detect gaps and support improvement actions.

Experience: At least 5 years of practical experience in IT Audit, IT Compliance, GRC coordination, or an IT Service/Operations role with substantial audit exposure. Degree in Computer Science, Information Systems, Engineering, Business Informatics, or equivalent practical tech background.

Technical Background: Working familiarity with IT infrastructure, cloud architectures, identity & Access Management (IAM), backup/resilience and Change Management - are a plus. GRC (Governance, Risk and Compliance) Understanding: Understanding of how control frameworks (e.g., Proven experience in aligning organizational processes with global regulatory frameworks, including ISO standards (e.g. 21 CFR Part 11, Annex 11), SOX IT General Controls, and data privacy laws (e.g.

English

Fluent. Must be completely comfortable writing, presenting to international teams, and communicating across distributed teams in English.

Valued Certifications: Certified Information Systems Auditor (CISA), Certified in Risk and Information Systems Control (CRISC), ISO/IEC 27001 Lead Implementer / Auditor, ITIL Foundation credentials - are a plus. Together, more than 100’000 employees across the globe are dedicated to advance science, ensuring everyone has access to healthcare today and for generations to come. Our efforts result in more than 26 million people treated with our medicines and over 30 billion tests conducted using our Diagnostics products.

We empower each other to explore new possibilities, foster creativity, and keep our ambitions high, so we can deliver life-changing healthcare solutions that make a general impact. We believe it’s urgent to deliver medical solutions right now – even as we develop innovations for the future. And we believe that good business means a better world.

We commit ourselves to scientific rigor, unassailable ethics, and access to medical innovations for all. We are many, working as one across functions, across companies, and across the world.

📌 Audit Manager - RDT Quality, Risk & Compliance (Madrid)
🏢 Roche
📍 Madrid