IT Compliance Director: SOX, GxP, CSV & ITIL

Eliassen Group; Waltham (MA); Hybrid; Confidential; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

401k with company match

Life insurance

Job summary

Eliassen Group is seeking an IT Compliance and Controls Consultant to strengthen governance, documentation, and audit readiness across key systems in a regulated life sciences environment. The role partners with IT, stakeholders, control owners, and auditors to build and improve SOX, GxP, CSV, SDLC, and ITIL controls while balancing access reviews and evidence collection.

The position is hybrid with 3–4 days onsite in Waltham, MA, offering W2 and corp-to-corp options and a benefits package

Qualifications

• Knowledge of SOX audit requirements and experience with SOX auditors.
• Knowledge of GxP/CSV audit requirements with GxP/CSV audits.
• Knowledge of IT SDLC processes and documentation governance.
• Knowledge of ITIL processes.
• Experience with SOC 1 and SOC 2 compliance.
• Experience with change management and change control processes.
• Audit support and evidence collection expertise.

Responsibilities

• Maintain a CMDB and related master data.
• Create and maintain policies and control procedures for key controls.
• Test internal controls, document exceptions, and oversee remediation.
• Baseline testing for key reports for SOX compliance.
• Create job aids, user guides, and presentations for control owners.
• Review SOC 1/SOC 2 reports and elevate remediation with stakeholders.
• Maintain IT Key Vendor List and review SOC reports as needed.
• Manage quarterly access reviews and review calendars with stakeholders.
• Oversee user access provisioning, modification, and termination processes.
• Ensure logging and review of admin activities on key systems.
• Oversee system change control procedures and SDLC artifacts.
• Periodic reviews of system changes and automation of compliance processes.
• Gather production reports and audit trails for reviews.
• Support USDM/ProcessX change control activities and process reviews.

Skills

SOX audit requirements

GxP/CSV audit requirements

IT SDLC processes

ITIL processes

SOC 1 & SOC 2 compliance

Change management & control

Audit support & evidence collection

Independent work ability

Communicate IT audit requirements

Influence change without authority

Attention to detail

Simplifying compliance processes

GxP in pharma life sciences

Tools

CMDB

SOC 1 reports

SOC 2 reports

USDM/ProcessX

Job description

Eliassen Group is seeking an IT Compliance and Controls Consultant to strengthen governance, documentation, and audit readiness across key systems in a regulated life sciences environment. The role partners with IT, stakeholders, control owners, and auditors to build and improve SOX, GxP, CSV, SDLC, and ITIL controls while balancing access reviews and evidence collection.

The position is hybrid with 3–4 days onsite in Waltham, MA, offering W2 and corp-to-corp options and a benefits package