Description
The SN Risk & Compliance Manager owns the risk and compliance position of the ServiceNow and enterprise tools platform, ensuring it remains in a state of compliance and fitness for intended use throughout its operational life.
The role involves running the Risk and Compliance Assessment to classify platform changes onto the Standard or GxP delivery track, verifying Digital Risk Navigator control attestation before release, and maintaining qualification and release evidence.
Key responsibilities include:
- Owning the risk and compliance position of the ServiceNow and enterprise tools platform
- Representing and supporting submissions for the platform at DPTF & D&T RMCB’s
- Running the Risk and Compliance Assessment for platform and product change
- Verifying Digital Risk Navigator control attestation before release
- Assuring automated compliance controls configured in ServiceNow change management
- Maintaining platform and tool qualification evidence and release documentation
- Running periodic compliance reviews and tracking findings and remediation
- Completing the AI Accountability Report with business and technology owners
- Assuring access management and privileged operations controls for the platform
- Producing Management Monitoring and Internal Controls Assurance evidence
- Supporting internal audit and regulatory inspection
The ideal candidate will have:
- A degree in a technology, life sciences, quality or business discipline
- 18 years of overall experience, with 8-10 years in IT risk, compliance, quality assurance or computer system validation
- Practical experience applying a risk-based software development lifecycle
- Experience with computer system validation for configurable or software-as-a-service platforms
- Working knowledge of ServiceNow or a comparable enterprise service management platform