Global Director - IT Governance, Risk & Compliance
On-sitePrague, Prague, Czechia
Job Summary
Develop and implement the global IT governance, risk, and compliance strategy while defining policies, procedures, and budgets. Lead IT compliance and risk management activities by identifying control weaknesses, coordinating corrective actions, and working closely with IT, Quality, Validation, Information Security, Legal, Data Privacy, and Internal Audit teams. Plan and oversee IT compliance reviews, internal audits, health checks, and risk assessments to ensure alignment with business objectives and regulatory requirements such as GxP, ISO 27001, and NIS2. Manage relationships with external suppliers, oversee service-level agreements, and define KPIs to monitor performance and support senior management reporting. Lead, coach, and develop the IT governance team while managing departmental priorities and budgets.
Required Qualifications
- Higher vocational education, university degree or equivalent professional experience
- At least 10 years of relevant professional experience in IT governance, risk management, compliance, internal controls, audit or a related area
- Proven experience in a senior leadership or management role
- At least 5 years of experience managing and developing teams
- Strong experience with IT governance, IT compliance, risk management, audit programs, internal controls and continuous improvement
- Strong understanding of IT infrastructure, IT processes, IT systems and service management environments
- Experience working within pharmaceutical, life sciences or another highly regulated industry
- Knowledge of GMP compliance and relevant control frameworks or industry standards, such as GAMP 5 and PIC/S
- Knowledge of Computer System Validation and assurance methodologies, including CSV and CSA
- Experience implementing or managing compliance programs, control frameworks, risk assessments and audit activities
- Strong understanding of KPIs, SLAs, performance reporting and budget management
- Experience working with internal and external auditors
- Excellent analytical, diagnostic and problem-solving skills
- Ability to assess complex risks and translate them into practical actions and recommendations
- Strong leadership, strategic thinking, planning and organizational skills
- Ability to manage change, competing priorities and unexpected or sensitive situations
- Excellent communication, collaboration and stakeholder management skills
- Ability to influence and work effectively with stakeholders at different organizational levels
- Fluent written and spoken English
- Willingness to provide a recent criminal record extract (not older than three months)
Desired Qualifications
- Experience with NIS2, PCI DSS, ISO 27001, ITIL or COBIT
- Knowledge of SSAE 16, ISAE 3402, SOC 1 or SOC 2
- Experience with FDA-related requirements, including 21 CFR Part 11
- Experience preparing control narratives, self-assessment documentation or audit evidence
- Experience managing outsourcing activities and third-party service providers
- Experience supporting automation, digitalization or IT transformation projects
- Experience leading change across global or matrix-based organizations
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.