Associate Director IT Compliance

Life Sciences WA; South San Francisco (CA); On-site; USD 160,000 - 180,000; Full time

Job summary

Novotech is seeking an Associate Director, IT Compliance to lead a global IT compliance program across CRO environments. You will drive governance, audit readiness, ISMS governance, and ISO/IEC 27001:2022 activities, while ensuring regulatory and quality alignment with IT practices and system controls.

You will translate regulatory obligations into practical IT controls, guide business and technology teams through audits, risk management and continuous improvement initiatives, and collaborate

Qualifications

• Bachelor’s Degree in Information Technology, Computer Science, Information Security, Quality, Life Sciences, Regulatory Compliance, or related discipline.
• Significant experience in IT compliance, technology risk, governance, information security, quality systems or regulated technology environments.
• Experience in regulated industries such as clinical research, pharmaceutical, biotechnology, medical device, healthcare or life sciences.
• Experience supporting vendor, sponsor, client, regulatory or certification audits.
• Practical knowledge of ISO/IEC 27001, ideally 2022 edition.
• Experience maintaining ISMS records, control evidence, risk registers, audit records and compliance documentation.
• Understanding of GxP computerised system compliance and risk-based validation principles.
• Familiarity with 21 CFR Part 11, EU Annex 11, GAMP 5, data integrity, GDPR or related obligations.
• Experience with SaaS, cloud-hosted systems, vendor qualification and third-party risk assessments.
• Experience collaborating with IT, QA, Legal, Privacy and business operations across functions.

Responsibilities

• Lead, organize and manage global IT Compliance function with clear priorities and governance.
• Act as the primary IT Compliance lead for technology governance, IT control assurance, IT audit readiness and regulatory support.
• Coordinate IT responses to vendor, sponsor, client and regulatory audits.
• Oversee ISMS governance and ISO/IEC 27001:2022 certification activities.
• Provide guidance on regulatory expectations for GxP computerised systems and risk-based validation.
• Lead technology risk assessments and remediation planning.
• Review supplier control evidence including ISO/SOC reports and privacy documentation.

Skills

IT governance

Regulatory compliance

Audit readiness

ISMS governance

GxP systems

Education

Bachelor’s degree in IT or related field

Tools

ServiceNow

SharePoint

GRC platforms

Job description

The Associate Director, IT Compliance is responsible for organising, leading and continuously improving Novotech’s IT Compliance function across a global CRO environment. The role provides leadership for IT governance, compliance assurance, audit readiness, vendor and sponsor audit responses, ISMS governance, ISO/IEC 27001:2022 certification activities, and regulatory compliance guidance for GxP computerised systems.

This role acts as a key interface between IT, Information Security, Quality Assurance, Legal, Privacy, Business Operations, system owners, sponsors, vendors and external auditors. The successful candidate will ensure that Novotech’s IT practices, systems, documentation and control evidence remain inspection-ready and aligned with applicable regulatory, contractual, quality and information security requirements.

The role requires a pragmatic compliance leader who can interpret regulatory obligations, translate them into practical IT controls and documentation, and guide business and technology teams through audit, certification, risk management and continuous improvement activities.

Responsibilities

Leadership of the IT Compliance Function

• Lead, organise and manage the global IT Compliance function, ensuring clear priorities, operating cadence, responsibilities, documentation standards and service expectations.
• Act as the primary IT Compliance lead for technology governance, IT control assurance, IT audit readiness and regulatory support.

Vendor, Sponsor and Regulatory Audit Management

• Manage and coordinate IT responses to vendor, sponsor, client and regulatory audits involving IT systems, IT practices, information security controls and data privacy controls.
• Manage and coordinate vendor, sponsor, client and regulatory reviews in relation to emerging AI and Machine Learning capabilities, as well as participate in strategy discussions related to AI

ISMS Governance and ISO/IEC 27001:2022 Certification

• Manage and maintain Information Security Management System records, registers, evidence repositories and governance documentation.
• Support the ongoing operation, monitoring and continual improvement of Novotech’s ISMS.

GxP and Computerised System Compliance Guidance

• Provide guidance to IT, Quality Assurance, system owners and business process owners on regulatory compliance expectations for GxP computerised systems.
• Support interpretation and practical application of relevant regulatory and industry expectations, including GxP, computerised system validation, data integrity, 21 CFR Part 11, EU Annex 11 and GAMP 5-aligned risk-based validation principles.

Governance, Risk and Control Assurance

• Lead or support technology risk assessments for new and existing systems, vendors, services and IT processes.
• Identify control gaps, compliance risks and documentation deficiencies, and work with accountable owners to define appropriate remediation or risk treatment plans.

Vendor and Third-Party Compliance Oversight

• Support supplier and vendor compliance assessments for technology vendors, cloud service providers, SaaS platforms and GxP-relevant suppliers.
• Review supplier control evidence such as ISO certifications, SOC reports, validation documentation, security questionnaires, privacy documentation and contractual compliance requirements.

Documentation, Training and Business Guidance

• Own or contribute to IT Compliance policies, SOPs, work instructions, templates, guidance materials and evidence packs.
• Translate complex regulatory, security and quality requirements into practical, business-friendly guidance.
• Effective operation of the global IT Compliance function.
• Timely, accurate and defensible IT responses to vendor, sponsor, client and regulatory audits.
• Maintained and audit-ready ISMS records, evidence, registers and governance artefacts.
• Successful support for ISO/IEC 27001:2022 certification, surveillance and recertification activities.
• Clear compliance guidance for GxP systems, SaaS platforms, cloud services and technology projects.
• Improved audit evidence reuse, response consistency and inspection readiness.
• Well-maintained IT Compliance SOPs, work instructions, templates and control documentation.
• Measurable tracking of IT compliance risks, findings, corrective actions and continual improvement initiatives.

Experience and Qualifications

Required

• Bachelor’s Degree in Information Technology, Computer Science, Information Security, Quality, Life Sciences, Regulatory Compliance, or a related discipline.
• Significant experience in IT compliance, technology risk, governance, information security, quality systems or regulated technology environments.
• Experience working in a regulated industry such as clinical research, pharmaceutical, biotechnology, medical device, healthcare or life sciences.
• Demonstrated experience supporting vendor, sponsor, client, regulatory or certification audits.
• Practical knowledge of ISO/IEC 27001, preferably ISO/IEC 27001:2022.
• Experience maintaining ISMS records, control evidence, risk registers, audit records, policies, procedures or compliance documentation.
• Understanding of GxP computerised system compliance and risk-based validation principles.
• Familiarity with regulatory frameworks and expectations such as 21 CFR Part 11, EU Annex 11, GAMP 5, data integrity principles, GDPR or other privacy/security obligations.
• Experience working with SaaS, cloud-hosted systems, vendor qualification, supplier audits or third-party risk assessments.
• Experience engaging with cross-functional stakeholders across IT, QA, Legal, Privacy, Information Security and business operations.

Preferred

• ISO/IEC 27001 Lead Implementer, Lead Auditor, Internal Auditor or equivalent certification.
• CISA, CRISC, CISM, CISSP, CGEIT or other relevant governance, risk, audit or information security certification.
• GxP, CSV, CSA, GAMP 5 or life sciences validation training.
• Privacy or data protection certification such as CIPP/E, CIPM or equivalent.
• Experience in a Contract Research Organisation, clinical trial technology environment, pharmaceutical sponsor environment or regulated SaaS ecosystem.
• Experience with ServiceNow, SharePoint, Smartsheet, Microsoft 365, GRC platforms, audit management tools or document management systems.
• Experience with emerging AI technologies as related to the GxP system validation and functions.

Salary Band – Associate Director IT Compliance: $160,000 to $180,000 USD – Salary offered will be based on candidates experience level.

Find out more about working at Novotech at:www.novotech-cro.com/careers

Novotech is proud to offer a great workplace. We are committed to being an employer of choice for gender equality and providing an inclusive work environment where everyone is treated fairly and with respect.

Our team members are passionate about what we do, but we understand work is only of the things that is important to them. We support our team members with flexible working options, paid parental leave for both parents, flexible leave entitlements, wellness programs and ongoing development programs.

We are looking for people who are passionate about working clinical research and biotech, including people who identify as LGBTIQ+, have a disability or have caring responsibilities.

We are a Circle Back Initiative Employer and commit to respond to every application. We look forward to contacting you regarding your application.

About Us

Novotech is a global full-service clinical Contract Research Organization (CRO).

At Novotech, ambition meets opportunity. As a globally recognized leader in clinical research and scientific advisory services, we are proud to combine our position at the forefront of the industry with an award-winning workplace culture that values ambition, innovation, and growth. Named Employer of Choice, Great Place to Work and Employer of Choice for Gender Equality (EOCGE), we are committed to fostering an environment that reflects the life-changing work we do.

Since 1997, we have expanded our global footprint, now with 30+ offices across Asia-Pacific, the United States, and Europe. This growing network unites professionals from diverse backgrounds and disciplines to advance therapies that improve patient outcomes worldwide.

At Novotech, our employees are at the heart of our success. By offering trust, flexibility, and autonomy through programs like NovoLife, our flexible benefits framework, we empower team members to create an effective work-life balance that delivers professional satisfaction and maximum results for clients.

With access to mentorship opportunities, professional development programs, and a dynamic community, Novotech offers a platform for driven individuals to achieve personal growth while shaping the future of healthcare. Join us to be a part of a team that values your contributions and supports your ambition to make a global impact.

About the Team

At Novotech we have advanced therapeutic and regulatory expertise, the ability to execute across markets and a client‑centric service model, so that our clients get a trusted, long‑term partner and an accelerated path to bring their life‑changing advances to market. This gives our employees the opportunity to develop their careers by joining a diverse and supportive global organization with a collaborative culture, whilst working with clients on the cutting‑edge of life sciences.

• Strategic vs transactional mindset.
• Ability to gain insights and make proactive decisions quickly.
• Culture that fosters partnership and collaboration, where every voice is heard and valued.
• Ongoing support from senior stakeholders and leadership team.

At Novotech we have advanced therapeutic and regulatory expertise, the ability to execute across markets and a client‑centric service model, so that our clients get a trusted, long‑term partner and an accelerated path to bring their life‑changing advances to market. This gives our employees the opportunity to develop their careers by joining a diverse and supportive global organization with a collaborative culture, whilst working with clients on the cutting‑edge of life sciences.

• Strategic vs transactional mindset.

• Ability to gain insights and make proactive decisions quickly.

• Culture that fosters partnership and collaboration, where every voice is heard and valued.

• Ongoing support from senior stakeholders and leadership team.