HR Policy, Risk & Controls Manager

Legend Biotech USA; Bridgewater (MA); On-site; USD 130,000 - 190,000; Full time

Job summary

Legend Biotech USA, based in Bridgewater, NJ, seeks an HR Policy, Risk & Controls Manager to drive policy governance and control effectiveness across HR functions. You will partner with HR leaders to align policies with regulations and risk frameworks, while coordinating with Internal Audit and external auditors.

The role emphasizes second-line oversight of HR risks, control design, and remediation, with hands-on experience in audits, reporting, and data-driven risk analysis.

Qualifications

• Bachelor's degree in HR, business, risk, or related field required.
• Master's degree is a plus; professional certifications preferred.
• Experience in HR risk, compliance, internal audit or risk management.

Responsibilities

• Develop and maintain HR policies and controls aligned with regulations.
• Monitor HR compliance, identify risks, and lead remediation actions.
• Oversee HR risk indicators, reporting, and governance with audit teams.
• Maintain HR Risk & Control Matrix and ensure documentation is current.
• Lead or support HR audits, tests, and remediation activities.
• Provide guidance to HR leaders on control design and execution.

Skills

HR risk

Regulatory compliance

Data privacy

Audit coordination

Stakeholder management

Education

Bachelor's degree

Master's degree (plus)

PHR/SPHR/SHRM-CP

Tools

Workday

Power BI

SharePoint

Smartsheet

Job description

Legend Biotech is seeking a HR Policy, Risk & Controls Manager as part of the HR Operations & Compliance team based in Bridgewater, NJ.

Role Overview

The HR Policy, Risk & Controls Manager plays a critical role in ensuring HR policies, processes, and programs align with internal controls, regulatory requirements, and the company's risk management framework. The role provides oversight across HR policy, risk, compliance, controls, and audit activities, partnering with HR functional leaders to ensure controls are appropriately designed, documented, and consistently followed. As a second line of defense, this role provides oversight and monitoring of HR risks and controls while partnering with Internal Audit and external auditors to support effective governance and compliance.

Key Responsibilities

• Develop and maintain HR policies and procedures in alignment with regulatory and company requirements.
• Monitor HR compliance and identify, assess, and mitigate emerging risks.
• Lead compliance assessments, corrective actions, and remediation activities.
• Monitor HR risk indicators and provide reporting and insights to HR leadership.
• Oversee data privacy and employee investigation governance from an HR compliance perspective.
• Lead HR regulatory reporting, compliance documentation, and HR training as appropriate.
• Monitor HR risk indicators and trends, investigate root causes, and partner with functional leaders to address emerging risks.
• Own and maintain the HR Risk & Control Matrix (RCM), ensuring it remains current and aligns with HR processes and risks.
• Partner with HR functional owners to ensure controls are understood, appropriately designed, consistently executed, and supported by sufficient documentation.
• Conduct periodic control checks and quarterly assessments to identify gaps and drive remediation.
• Oversee HR SOX controls, including documentation, testing, evidence, and remediation.
• Partner with Internal Audit and external auditors to facilitate control walkthroughs, testing, and information requests.
• Lead or support HR audits and ensure findings are appropriately documented and remediated.
• Serve as a central point of contact for HR risk, controls, compliance, and audit matters.
• Provide guidance to HR leaders and functional teams to strengthen the overall HR control environment.
• Prepare risk, compliance, and audit reporting for HR leadership and relevant stakeholders, and track remediation activities through completion.
• Decides when to escape HR risks, compliance issues, and investigation outcomes to leadership.
• Determines control priorities and remediation actions based on risk assessments and audit findings.
• Evaluates and approves updates to HR policies, procedures, and SOX controls to meet regulatory and business needs.
• Identifies data trends and root causes to inform risk mitigation strategies.

Requirements

• Bachelor's degree in human resources, Business Administration, Risk Management, Compliance or a related field required.
• Master's degree in HR, Business, Law, or a related discipline a plus.
• Relevant certifications preferred (e.g., PHR/SPHR, SHRM-CP/SCP, Certified Compliance & Ethics Professional - CCEP)
• Minimum of 5 years of experience in HR, compliance, internal audit, risk management or a similar function. The candidate should also have experience in a fast-paced professional environment and work with cross-functional teams.Strong understanding of risk management principles and compliance frameworks.
• Familiarity with HR systems, data privacy laws (e.g., GDPR, CCPA), and internal audit practice.
• Strong analytical skills to interpret HR metrics and identify trends or red flags.
• Excellent communication and stakeholder management, especially when partnering with HR, Legal, Audit, and Risk functions.
• High attention to detail, integrity, and ability to maintain confidentiality.
• Critical thinking and problem-solving mindset with a proactive approach to compliance.
• Advanced Excel skills for data analysis and risk reporting (pivot tables, lookups, dashboards).
• Proficiency with HRIS (Workday) and audit/compliance tools Familiarity with data visualization or reporting tools (e.g., Power BI).
• Experience with document management and workflow tools (e.g., SharePoint, Smartsheet).

Legend Biotech is a global biotechnology company dedicated to treating and, one day, curing life-threatening diseases. Headquartered in Bridgewater, New Jersey, we are advancing the next generation of cell therapy through a portfolio of innovative technologies, including autologous, allogeneic, and in vivo cell therapy approaches. Our research spans chimeric antigen receptor T-cell (CAR-T), T-cell receptor (TCR-T), natural killer (NK) cell-based therapies, and other emerging platforms designed to transform the treatment of serious diseases. From our global network of research and development sites, we are committed to discovering and developing safe, effective, and cutting-edge therapies for patients worldwide.

Legend Biotech entered into a global collaboration agreement with Johnson & Johnson to jointly develop and commercialize CARVYKTI (ciltacabtagene autoleucel; cilta-cel). Through this strategic partnership, we combine complementary expertise and capabilities to advance innovative immunotherapies for patients living with multiple myeloma.

Please note: These benefits are offered exclusively to permanent full-time employees. Contractors are not eligible for benefits through Legend Biotech.

Work Authorization & Employment Eligibility

Applicants must be authorized to work in the United States. As part of our commitment to maintaining a lawful workforce and ensuring compliance with federal employment regulations, we participate in the E-Verify program. If you are selected for employment, you will be required to complete the Form I-9 process, and your employment eligibility will be verified through E-Verify in accordance with applicable federal law. We are committed to providing a fair, transparent, and welcoming hiring experience for all candidates.

EEO Statement

It is the policy of Legend Biotech to provide equal employment opportunities without regard to actual or perceived race, color, creed, religion, national origin, ancestry, citizenship status, age, sex or gender (including pregnancy, childbirth, related medical conditions and lactation), gender identity or gender expression (including transgender status), sexual orientation, marital status, military service and veteran status, disability, genetic information, or any other protected characteristic under applicable federal, state or local laws or ordinances.

Employment is at-will and may be terminated at any time with or without cause or notice by the employee or the company.

For information related to our privacy notice, please review: Legend Biotech Privacy Notice .