CareDx is a leading precision medicine diagnostics company advancing care in transplant, specialty oncology, and cell therapy. Through our innovative portfolio of molecular diagnostics, digital health solutions, AI-powered data and analytics, and patient support services, we partner with healthcare providers, patients, and biopharma organizations to help inform clinical decision-making and improve patient outcomes.
This individual will play a key role in documenting technical systems, preparing for internal and external audits (including SOX), defining and standardizing account roles, and supporting system integrity through cleanup and access control initiatives. This person will champion system hygiene by identifying outdated, redundant, or improperly configured accounts, and will work with stakeholders to perform systematic cleanups. By doing so, they will help strengthen access controls, improve security posture, and optimize system performance. This role is not only tactical but strategic, contributing directly to CareDx’s commitment to security, compliance, and operational excellence in a regulated environment.
Responsibilities:
IT Systems Documentation
- Develop and maintain comprehensive documentation of enterprise IT systems, applications, data flows, and integrations.
- Collaborate with engineers and stakeholders to ensure documentation is up-to-date, versioned, and accessible.
SOX Audit Support
- Coordinate and prepare documentation for SOX audits, ensuring alignment with ITGC (IT General Controls) and access management policies.
- Assist in control testing, remediation tracking, and audit response efforts.
Account Role & Access Management
- Define, maintain, and optimize user roles, entitlements, and access control models across critical systems.
- Work with IT and Security teams to implement least-privilege and role-based access practices.
System Cleanup & Maintenance
- Identify and help remediate orphaned accounts, stale permissions, and unused resources.
- Propose and implement data quality standards and system hygiene practices.
· Policy & Procedure Development
- Assist in creating and revising IT policies, SOPs, and operational playbooks.
- Ensure compliance with regulatory and internal security standards.
Collaboration & Project Participation
- Partner with IT, InfoSec, Internal Audit, and other departments on cross-functional initiatives.
- Participate in IT compliance and infrastructure projects by providing documentation and control input.
Minimum Education, Experience, & Specialized Knowledge (Required):
- Bachelor's degree in Information Systems, Computer Science, or equivalent work experience.
- 2–5 years of experience in IT compliance, system documentation, or audit support.
- Knowledge of SOX compliance, ITGCs, and role-based access control frameworks.
- Familiarity with identity management tools (e.g., Okta, Active Directory).
- Excellent written communication and organizational skills.
- Experience working in regulated environments (healthcare, biotech, finance) is a plus.
- Experience with ERP or other finance systems such as NetSuite or Coupa
Additional Details:
Every individual at CareDx has a direct impact on our collective mission to improve the lives of organ transplant patients worldwide. We believe in taking great care of our people, so they take even greater care of our patients.
Our competitive Total Rewards package for US Employees includes:
- Competitive base salary and incentive compensation
- Health and welfare benefits, including a gym reimbursement program
- 401(k) savings plan match
- Employee Stock Purchase Plan
- Pre-tax commuter benefits
- And more!
- Please refer to our page to view detailed benefits at https://caredx.com/company/careers
In addition, we have a Living Donor Employee Recovery Policy that allows up to 30 days of paid leave annually to a full-time employee who makes the selfless act of donating an organ or bone marrow.
With products that are making a difference in the lives of transplant patients today and a promising pipeline for the future, it’s an exciting time to be part of the CareDx team. Join us in partnering with transplant patients to transform our future together.
CareDx, Inc. is an Equal Opportunity Employer-vets/disabled, and participates in the E-Verify program. By proceeding with our application and submitting your information, you acknowledge that you have read our U.S. Personnel Privacy Notice and consent to receive email communication from CareDx. Certain jurisdictions require notice of how we use and protect your personal information. For more information, please read our Privacy Policy
The U.S. EEO posters are available here.
Note: We do not accept resumes from headhunters, placement agencies, or other suppliers that have not signed a formal agreement with us.
#LI-REMOTE
This is the anticipated base salary range in the United States. The final salary offered to a successful candidate will be dependent on several factors that may include, but are not limited to, the type and length of experience within the job, the type and length of experience within the industry, education, etc. Base pay is one part of the Total Package that is provided to compensate and recognize employees for their work, and this role may be eligible for additional discretionary bonuses/incentives and restricted stock units. CareDx is a multi-state employer, and this salary range may not reflect positions that work in other states.
Skills Required
- Bachelor's degree in Information Systems, Computer Science, or equivalent work experience
- 2-5 years of experience in IT compliance, system documentation, or audit support
- Knowledge of SOX compliance, IT General Controls, and role-based access control frameworks
- Familiarity with identity management tools such as Okta or Active Directory
- Excellent written communication and organizational skills
- Experience working in regulated environments such as healthcare, biotech, or finance
- Experience with ERP or finance systems such as NetSuite or Coupa
What We Do
CareDx: Transforming Transplant Patient Care Through Novel Surveillance Management Solutions CareDx, Inc. is dedicated to improving the lives of organ transplant patients through non-invasive diagnostics. By combining the latest advances in genomics and bioinformatics technology, with a commitment to generating high quality clinical evidence through trials and registries, CareDx is at the forefront of organ transplant surveillance and pre-transplant HLA typing solutions. NASDAQ:CDNA About AlloSure® AlloSure is the first and only non-invasive blood test that directly measures allograft injury and identifies the probability of active rejection to better manage kidney transplant patients. AlloSure is a clinical-grade, proprietary Next-Generation Sequencing (NGS) based test to detect donor-derived cell-free DNA (dd-cfDNA) in order to identify organ injury in kidney transplant recipients. AlloSure is analytically validated as a sensitive, specific, and precise measurement of dd-cfDNA. AlloSure detects active rejection (acute active ABMR, chronic active ABMR, or TCMR) with high accuracy, outperforms serum creatinine in kidney transplant recipients, and is highly sensitive in distinguishing ABMR from no ABMR. AlloSure is performed in the CareDx CLIA-certified laboratory. http://www.allosure.com/ About AlloMap® AlloMap Molecular Expression Testing is a non-invasive blood test used to aid in the identification of heart transplant recipients with stable allograft function who have a low probability of moderate/severe acute cellular rejection at the time of testing in conjunction with standard clinical assessment. AlloMap testing measures the expression levels of 20 genes from a blood sample. The combined expression of these genes is represented as an AlloMap test score. AlloMap is performed in the CareDx CLIA-certified laboratory and has been commercially available in the United States since 2005. AlloMap was cleared by the U.S. Food and Drug Administration in 2008 and was CE marked for the European Union in 2011. Use of AlloMap is also included in the International Society for Heart and Lung Transplantation (ISHLT) Practice Guidelines, published in August 2010, the worldwide standard for the care of heart transplant patients. http://www.allomap.com/
