Global IT GRC Architect - Remote/Hybrid

Roche; Poznań; Hybrid; PLN 212,000 - 395,000; Full time

Benefits offered by this job

Annual bonus

Training budget

Recharge Fridays

Take Time Program

Vacation subsidy

Flex Location

Volunteer leave

Private healthcare

Life insurance

Stock purchase

Laptops & cars

Job summary

Roche is seeking an IT GRC Expert to design and implement enterprise-wide resilience, risk management and compliance strategies. You will lead high-level risk assessments, develop audit and continuity programs, and coordinate with senior stakeholders to ensure regulatory alignment and scalable governance across the organization.

The role requires expertise in Life Sciences regulations (GxP, SOX, HIPAA), ITGC, and major frameworks (SOC2, ISO 27001, NIS2, DORA).

Qualifications

• Experience designing enterprise-wide IT resilience, risk management and compliance strategies.
• Experience with Life Sciences regulations (GxP, SOX, HIPAA) and CSV.
• Strong knowledge of ITGC, SOC2, ISO 27001, NIS2, DORA.
• Cloud proficiency in AWS/Azure and shared responsibility models.
• Ability to implement Compliance-as-Code and secure DevOps practices.

Responsibilities

• Develop and refine enterprise-wide risk management, compliance and continuity strategies.
• Lead responses to IT risk, audit and continuity events; establish global best practices.
• Conduct post-incident reviews and deep-dives to identify systemic failures.
• Maintain stakeholder relationships; advise on aligning risk policies with business needs.
• Provide insights to ensure compliance frameworks remain world-class and scalable.
• Oversee IT resilience solutions and the integration of governance across systems.
• Evaluate tools to future-proof the enterprise IT landscape.
• Deliver training on BCM best practices and problem-solving techniques.

Skills

IT risk management

Regulatory compliance

ITGC

Security frameworks

Cloud AWS/Azure

Governance of AI/RPA

Secure SDLC

Stakeholder management

Education

Bachelor’s or Master in IT/Cybersecurity

CISA/CRISC/CISM/CISSP/ISO 22301 credential

Tools

Jira

Jenkins

Bitbucket

Job description

Roche is seeking an IT GRC Expert to design and implement enterprise-wide resilience, risk management and compliance strategies. You will lead high-level risk assessments, develop audit and continuity programs, and coordinate with senior stakeholders to ensure regulatory alignment and scalable governance across the organization.

The role requires expertise in Life Sciences regulations (GxP, SOX, HIPAA), ITGC, and major frameworks (SOC2, ISO 27001, NIS2, DORA).