Sr. IT Compliance Analyst

Liquidia Corporation; Morrisville (NC); On-site; USD 110,000 - 140,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

STD

LTD

401(k) Savings Plan

ESPP

Job summary

Liquidia Corporation is seeking a Sr. IT Compliance Analyst to lead IT compliance in a commercial-stage pharmaceutical environment, aligning IT controls with SOX, GxP, and 21 CFR Part 11.

This role bridges IT with Quality, drives audits, risk assessments, and the IT cybersecurity program on a multi-year roadmap. You will steward IT governance, risk management, and third-party IT risk processes, while coordinating with Audit, Legal, and Procurement to ensure timely remediation of findings and

Qualifications

• 8+ years in IT compliance, IT audit, or GRC with a Bachelor's or 6+ years with a Master's in IT, Business, Accounting, or related field.

Responsibilities

• Maintain IT policies, standards, and SOPs with version control and stakeholder approvals.
• Maintain IT risk registers, governance trackers, and control evidence.
• Manage AI governance documentation and monitoring artifacts.
• Administer SOX ITGC documentation and evidence collection.
• Coordinate ITGC walkthroughs and audits with internal/external auditors.
• Track IT audit findings and close corrective actions.
• Maintain 21 CFR Part 11 documentation for IT systems and coordinate with Quality on validation.
• Support infrastructure qualification activities for GxP systems with IT templates.
• Participate in change control and periodic review for validated IT systems.

Skills

SOX ITGC

IT audits

GRC

Cybersecurity frameworks

Technical writing

Decision making

Influence without authority

eQMS tools

MS Office

FDA 21 CFR Part 11

Education

Bachelor's degree in IT/Business/Accounting

Master's degree

Tools

AuditBoard

Veeva

Job description

Liquidia is deeply passionate and committed to the discovery, engineering, and development required to bring novel therapies to patients who need them most, and to the healthcare providers who care for them. Our current drive is toward improving the treatment of pulmonary hypertension (PH). We will continue to combine our proprietary, innovative PRINT® Technology with new and established medications, offering the potential for both better precision and improved clinical outcomes. Our team members include some of the industry’s top scientists, clinicians, business strategists, engineers, and pharmaceutical executives. We work together to help people lead longer, healthier, and happier lives.

The Sr. IT Compliance Analyst is the senior individual contributor responsible for the operational execution of Liquidia's IT compliance program in a commercial-stage public pharmaceutical environment subject to SOX, GxP, and 21 CFR Part 11 regulations. The role serves as the primary IT bridge to the Quality function on compliance and computerized system validation matters, plans and conducts internal IT audits, manages supplier and third-party IT risk assessments, oversees the IT Infrastructure Qualification program for GxP-supporting infrastructure, serves as the primary IT liaison for external audit engagements, drives corrective action closure, and leads the maturation of the IT cybersecurity framework on a multi-year roadmap. The role contributes to the broader IT cybersecurity program through coordination on policy lifecycle, AI governance documentation, and risk register maintenance. This position establishes operational separation of duty between IT compliance oversight and IT security and infrastructure execution.

Job responsibilities

• Steward the lifecycle of IT policies, standards, and standard operating procedures, including version control, periodic review, and stakeholder approval workflows.
• Maintain the IT risk register, governance trackers, and recurring control evidence, including quarterly review cadences.
• Maintain AI governance documentation, including tool authorization records and monitoring artifacts.
• Administer SOX IT General Controls (ITGC) documentation, evidence collection, and control performance tracking.
• Coordinate ITGC walkthroughs, testing, and evidence requests with internal and external auditors, ensuring timely delivery of requested artifacts.
• Track IT audit findings and corrective actions through verified closure with control owners.
• Maintain 21 CFR Part 11 documentation for IT-managed systems and coordinate with Quality on validation boundaries.
• Support infrastructure qualification activities for GxP-supporting infrastructure using established IT qualification templates, in coordination with Quality and the Computer System Validation function.
• Participate in change control and periodic review activities for validated and qualified IT systems to assess compliance impact.
• Maintain cybersecurity framework alignment documentation and support gap analysis and remediation tracking.
• Conduct third-party IT risk assessments in coordination with Procurement and Legal.
• Support security awareness training compliance reporting and incident response documentation.
• Perform other duties as assigned.

Job requirements

Education and Experience:

• Minimum of 8 years of progressive experience in IT compliance, IT audit, or governance, risk, and compliance (GRC) functions with a Bachelor's degree, or a minimum of 6 years with a Master's degree, in Information Technology, Business, Accounting, or a related discipline.
• Demonstrated experience in the pharmaceutical, biotechnology, or life sciences industry preferred.
• Working knowledge of IT-relevant Good Practice (GxP) regulations, including United States (FDA) requirements and 21 CFR Part 11.
• Working knowledge of GAMP 5 methodology and IT infrastructure qualification practices.
• Demonstrated experience supporting external audits and managing corrective action lifecycles.

Knowledge, Skills and Abilities:

• Strong working knowledge of SOX IT General Controls, including access management, change management, and operational controls in support of financial reporting.
• Familiarity with industry-recognized cybersecurity frameworks and tiered adoption approaches.
• Professional certifications such as CISA, CRISC, CISM, or equivalent preferred.
• Strong technical writing skills suitable for compliance and qualification documentation.
• Excellent written and verbal communication skills across IT, Quality, senior leadership, and external auditors.
• Capable of independent decision-making on compliance matters within defined scope, with sound judgment on when to escalate.
• Demonstrated ability to influence control owners without direct management authority.
• Experience with eQMS platforms and audit management tools (AuditBoard, Veeva, or comparable) preferred.
• Proficient in MS Office.

Liquidia offers a competitive compensation package as well as a comprehensive benefits package that includes Medical, Dental, Vision, STD, LTD, 401(k) Savings Retirement Plan, ESPP, and more!

Liquidia is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status. Reasonable accommodation may be made to enable qualified individuals with disabilities to perform the essential functions of this position.

Recruiting Agencies, Please Note:

Liquidia will not accept unsolicited assistance from recruiting/search agencies for this employment opportunity. Please, no phone calls or emails. All resumes submitted by recruiting or search agencies to any employee at Liquidia via email, the Internet or in any form and/oder method without a valid written search/recruitment agreement in place for this position will be deemed the sole property of Liquidia. No fee will be paid in the event the candidate is hired by Liquidia as a result of the referral or through other means.