IT GRC Expert - RDT Quality, Risk & Compliance

Roche; Poznań; On-site; PLN 212,000 - 395,000; Full time

Benefits offered by this job

Annual bonus

Training budget

Recharge Fridays

Take Time Program

Vacation subsidy

Flex Location

Volunteer leave

Private healthcare

Life insurance

Stock purchase

Laptops & cars

Job summary

Roche is seeking an IT GRC Expert to design and implement enterprise-wide resilience, risk management and compliance strategies. You will lead high-level risk assessments, develop audit and continuity programs, and coordinate with senior stakeholders to ensure regulatory alignment and scalable governance across the organization.

The role requires expertise in Life Sciences regulations (GxP, SOX, HIPAA), ITGC, and major frameworks (SOC2, ISO 27001, NIS2, DORA).

Qualifications

• Experience designing enterprise-wide IT resilience, risk management and compliance strategies.
• Experience with Life Sciences regulations (GxP, SOX, HIPAA) and CSV.
• Strong knowledge of ITGC, SOC2, ISO 27001, NIS2, DORA.
• Cloud proficiency in AWS/Azure and shared responsibility models.
• Ability to implement Compliance-as-Code and secure DevOps practices.

Responsibilities

• Develop and refine enterprise-wide risk management, compliance and continuity strategies.
• Lead responses to IT risk, audit and continuity events; establish global best practices.
• Conduct post-incident reviews and deep-dives to identify systemic failures.
• Maintain stakeholder relationships; advise on aligning risk policies with business needs.
• Provide insights to ensure compliance frameworks remain world-class and scalable.
• Oversee IT resilience solutions and the integration of governance across systems.
• Evaluate tools to future-proof the enterprise IT landscape.
• Deliver training on BCM best practices and problem-solving techniques.

Skills

IT risk management

Regulatory compliance

ITGC

Security frameworks

Cloud AWS/Azure

Governance of AI/RPA

Secure SDLC

Stakeholder management

Education

Bachelor’s or Master in IT/Cybersecurity

CISA/CRISC/CISM/CISSP/ISO 22301 credential

Tools

Jira

Jenkins

Bitbucket

Job description

At Roche you can show up as yourself, embraced for the unique qualities you bring. Our culture encourages personal expression, open dialogue, and genuine connections, where you are valued, accepted and respected for who you are, allowing you to thrive both personally and professionally. This is how we aim to prevent, stop and cure diseases and ensure everyone has access to healthcare today and for generations to come. Join Roche, where every voice matters.

The Position

IT GRC Expert - RDT Quality, Risk & Compliance

As an IT GRC (Governance, Risk & Compliance) Expert - RDT (Roche Digital Technology) Quality, Risk & Compliance you design and implement comprehensive IT resilience, risk management, and compliance strategies aligned with business objectives. You lead complex risk assessments, develop refined audit and continuity programs, and establish best practices for handling critical disruptions and regulatory compliance. Acting as an expert advisor to high-level stakeholders, you lead responses to critical incidents and ensure the scalability and future-proofing of enterprise-wide risk and continuity solutions.

The Opportunity:

• You will develop and refine enterprise-wide risk management, compliance, and continuity strategies to enhance our global recovery plans.
• Lead the response to critical IT risk, audit, and continuity events while establishing global best practices for handling disruptions.
• Conduct post-incident reviews and "deep-dives" to identify systemic failures and implement continuous improvement frameworks.
• Manage high-level stakeholder relationships, acting as a strategic advisor to align risk policies with evolving business needs.
• Provide strategic insights based on industry best practices to ensure our compliance frameworks remain world-class.
• Oversee the scalability of IT resilience solutions, integrating complex policies with existing enterprise systems.
• Evaluate and select advanced tools for enterprise management to future-proof our technical resilience landscape.
• Facilitate advanced training sessions for cross-functional teams on BCM best practices and advanced problem-solving techniques.

Who you are:

• You possess extensive experience in architecting enterprise-wide IT resilience and risk management strategies at a strategic level.
• Expert in Life Sciences regulations, including GxP, SOX, and HIPAA, with a deep understanding of computer systems validation (CSV).
• Highly knowledgeable in IT General Controls (ITGC) and frameworks such as SOC2, ISO 27001, NIS2, and DORA.
• Technically proficient in AWS and Azure environments, specifically regarding shared responsibility models and cloud-native DR orchestration.
• Proven ability to establish governance guardrails for emerging technologies like Generative AI, RPA, and SaaS.
• Skilled in secure SDLC and DevOps stacks (Jira, Jenkins, Bitbucket) with the ability to implement Compliance-as-Code.
• Holder of a Bachelor’s or Master’s degree in IT or Cybersecurity, and at least one active credential: CISA, CRISC, CISM, CISSP, or ISO 22301.

What you get:

• Salary range 19 000 - 35 400PLN grossbased on the employment contract.
• Annual bonus payment based on your performance.
• Dedicated training budget (training, certifications, conferences, diversified career paths etc.).
• Recharge Fridays (2 Fridays off per quarter available).
• Take time Program (up to 3 months of leave to use for any purpose).
• Vacation subsidy available.
• Flex Location (possibility to perform our work from different places in the world for a certain period of time).
• Take Time for Charity (additional paid leave of maximum 2 weeks to engage in the charity action of your choice).
• Private healthcare (LuxMed packages), group life insurance (UNUM) and Multisport.
• Stock share purchase additions.
• Yearly sales of company laptops and cars and many more!

The controller of your personal data is Roche Polska Sp. z o.o., ul. Domaniewska 28, 02-672 Warsaw. The data is processed for the purpose of recruitment. You have the right to access your data, rectify it, delete it, limit processing, transfer it and - if processing is based on your consent - withdraw this consent at any time. Contact the Data Protection Officer at: [e-mail]. More information on the principles of processing your personal data by Roche at the link:

https://www.roche.pl/pl/content/klauzula-informacyjna-rekrutacja-en.html

Roche Polska sp. z o.o. operates in full compliance with the law and does not tolerate any violations. Roche Polska sp. z o.o. has implemented a Procedure for Reporting Violations of Law. If you wish to report any irregularities related to our activities, all necessary information regarding the reporting process can be found on our website: https://www.roche.pl/kontakt/ochrona-sygnalistow-zglaszanie-naruszen .

Compensation & Benefits

The expected salary range for this position, based on the primary location of Warsaw Grafit is 228,900.00 PLN-425,100.00 PLN. Final compensation will be determined by a number of factors, including your skills, experience, qualifications, and location. In addition to base pay, this role may be eligible for a discretionary annual bonus with a target of 20% subject to both individual and company performance.

This position also offers an attractive benefits package (https://cdn.phenompeople.com/CareerConnectResources/prod/ROCHGLOBAL/documents/PolandBenefitsBrochureMyrewards-1763649233034.pdf) .

Learn more (https://roche.phenompro.com/global/en/compensation-philosophy) about how we reward our employees at Roche.

Who we are

A healthier future drives us to innovate. Together, more than 100’000 employees across the globe are dedicated to advance science, ensuring everyone has access to healthcare today and for generations to come. Our efforts result in more than 26 million people treated with our medicines and over 30 billion tests conducted using our Diagnostics products. We empower each other to explore new possibilities, foster creativity, and keep our ambitions high, so we can deliver life-changing healthcare solutions that make a global impact.

Let’s build a healthier future, together.

Roche is an Equal Opportunity Employer.