At Roche you can show up as yourself, embraced for the unique qualities you bring. Our culture encourages personal expression, open dialogue, and genuine connections, where you are valued, accepted and respected for who you are, allowing you to thrive both personally and professionally. This is how we aim to prevent, stop and cure diseases and ensure everyone has access to healthcare today and for generations to come. Join Roche, where every voice matters.
The PositionSenior IT Audit & Compliance Specialist (ERP Systems Management)
The Senior IT Audit & Compliance Specialist (ERP Systems Management) serves as a strategic and technical expert responsible for embedding end-to-end audit readiness, quality oversight, and regulatory controls across enterprise-wide ERP systems (e.g., SAP S/4HANA ASPIRE, SAP ECC, EWM, and connected value stream platforms). The role bridges complex regulatory mandates across GxP (CSV, Annex 11, 21 CFR Part 11), ICFR (SOX, ITGCs), and IT Security, ensuring continuous compliance, proactive risk mitigation, and seamless execution during internal/external audits and health authority inspections. Operating within RDT ERP Systems Management – Compliance, this position plays a critical part in protecting system integrity and operational excellence across Roche's enterprise digital ecosystem.
The Opportunity
In this role, you will lead audit readiness, technical compliance, and regulatory governance across multi-value stream ERP environments.
You will:
- Plan, execute, and defend audit readiness frameworks across Finance, Supply Chain, Operations, Manufacturing, and Procurement ERP landscapes.
- Act as the primary Audit Host Manager and Single Point of Contact (SPOC) for internal Group Audits (GARA), external statutory audits (e.g., KPMG for ICFR/SOX), and Health Authority GxP inspections.
- Coordinate cross-functional Subject Matter Experts (SMEs), System Owners, and Business Process Owners (BPOs) to fulfill audit data requests, conduct technical walkthroughs, and defend system controls.
- Manage the end-to-end Corrective and Preventive Action (CAPA) lifecycle, driving root cause analysis (RCA) and ensuring on-time remediation of audit findings and IT deviations.
- Ensure all regulated ERP systems comply with Roche Computerized System Validation (CSV) policies, GxP Data Integrity (ALCOA++), Annex 11, 21 CFR Part 11, GAMP standards, and AI validation SOPs.
- Maintain and monitor IT General Controls (ITGCs) across User Access & Authorizations, Change Management (SolMan/ChaRM), IT Operations, Segregation of Duties (SoD), and emergency firefighter access.
- Enforce Minimum Security Baseline standards, vulnerability management (e.g., Onapsis code profiling, kernel patching), and system access controls across ERP platforms.
- Provide technical and quality oversight for key strategic managed service providers, reviewing vendor SOC 1 / SOC 2 reports, vendor quality assessments (VQA), and third-party risk profiles.
Who you are
We are looking for a highly analytical, compliance-minded expert who excels at translating regulatory requirements into robust operational controls. To succeed in this role, you bring:
- Experience: Minimum 5–8+ years of hands-on experience in IT Compliance, Audit Management, CSV, or Quality Assurance within enterprise ERP environments (preferably SAP S/4HANA or ECC) in pharmaceutical, life sciences, or highly regulated industries.
- Education: A University Bachelor’s degree in Computer Science, Information Technology, Information Systems, Business Administration, or a related technical/regulatory field.
- Audit & Inspection Track Record: Proven background hosting or defending systems during internal financial/GxP audits and external health authority inspections within global, matrixed environments.
- GxP & CSV Expertise: In-depth knowledge of Computerized System Validation (CSV), GAMP5, EudraLex Annex 11, FDA 21 CFR Part 11, and GxP Data Integrity (ALCOA++) principles.
- ICFR, SOX & Security Knowledge: Solid understanding of IT General Controls (ITGCs), Segregation of Duties (SoD), SAP Authorizations, ISO 27001, vulnerability management, and access governance.
- Tool & Platform Proficiency: Hands-on experience with SAP Solution Manager (SolMan), Focused Build, ChaRM, ServiceNow (IRM/ITSM), Veeva QualityDocs, and GRC tools.
- Communication & Leadership: Strategic problem-solving mindset with exceptional stakeholder management, negotiation, and communication skills to collaborate effectively with executive leadership, legal counsel, and external auditors.
Call to Action
Ready to bring your unique qualities to Roche and make an impact? Apply now and join us in our mission to shape the future of healthcare.
#RDT2026
Who we are
A healthier future drives us to innovate. Together, more than 100’000 employees across the globe are dedicated to advance science, ensuring everyone has access to healthcare today and for generations to come. Our efforts result in more than 26 million people treated with our medicines and over 30 billion tests conducted using our Diagnostics products. We empower each other to explore new possibilities, foster creativity, and keep our ambitions high, so we can deliver life-changing healthcare solutions that make a global impact.
Let’s build a healthier future, together.
Roche is an Equal Opportunity Employer.
Skills Required
- Minimum 5–8+ years of hands-on experience in IT compliance, audit management, computerized system validation, or quality assurance within enterprise ERP environments
- Bachelor’s degree in Computer Science, Information Technology, Information Systems, Business Administration, or a related technical or regulatory field
- Experience hosting or defending systems during internal financial or GxP audits and external health authority inspections
- In-depth knowledge of Computerized System Validation, GAMP5, EudraLex Annex 11, FDA 21 CFR Part 11, and GxP data integrity principles
- Understanding of IT General Controls, Segregation of Duties, SAP authorizations, ISO 27001, vulnerability management, and access governance
- Hands-on experience with SAP Solution Manager, Focused Build, ChaRM, ServiceNow IRM or ITSM, Veeva QualityDocs, and GRC tools
- Experience in SAP S/4HANA or ECC environments within pharmaceutical, life sciences, or other highly regulated industries
- Exceptional stakeholder management, negotiation, communication, and strategic problem-solving skills
Roche Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Roche and has not been reviewed or approved by Roche.
-
Retirement Support — U.S. materials describe a 401(k) with both matching and an additional company contribution, supported by formal plan documents and true‑up features. This structure is positioned as a standout element of the total package, particularly at Genentech.
-
Leave & Time Off Breadth — Time‑off provisions include substantial vacation, a year‑end shutdown, and a paid six‑week sabbatical after six years. These elements indicate a recharge‑oriented approach within the U.S. offering.
-
Healthcare Strength — Company materials emphasize comprehensive medical, dental, vision, and mental‑health resources alongside well‑being programs. Benefits pages consistently highlight breadth across core health coverage elements.
Roche Insights
What We Do
Roche is a global pioneer in pharmaceuticals and diagnostics focused on advancing science to improve people’s lives. The combined strengths of pharmaceuticals and diagnostics under one roof have made Roche the leader in personalised healthcare – a strategy that aims to fit the right treatment to each patient in the best way possible. Roche is the world’s largest biotech company, with truly differentiated medicines in oncology, immunology, infectious diseases, ophthalmology and diseases of the central nervous system. Roche is also the world leader in in vitro diagnostics and tissue-based cancer diagnostics, and a frontrunner in diabetes management. Founded in 1896, Roche continues to search for better ways to prevent, diagnose and treat diseases and make a sustainable contribution to society. The company also aims to improve patient access to medical innovations by working with all relevant stakeholders. Thirty medicines developed by Roche are included in the World Health Organization Model Lists of Essential Medicines, among them life-saving antibiotics, antimalarials and cancer medicines. Roche has been recognised as the Group Leader in sustainability within the Pharmaceuticals, Biotechnology & Life Sciences Industry ten years in a row by the Dow Jones Sustainability Indices (DJSI).
