IT Quality Management, SOx Operations Director

Job Description

Job Title: IT Quality Management, SOx Operations Director

Location: Macclesfield

Permanent

Salary: Competitive

Introduction to role:

AstraZeneca is a global, innovation-driven Biopharmaceutical business that focuses on the discovery, development and commercialisation of prescription medicines for some of the world’s most serious diseases. But we’re more than one of the world’s leading pharmaceutical companies. At AstraZeneca, we're dedicated to being a Great Place to Work, where you are empowered to push the boundaries of science and unleash your ambitious spirit. There’s no better place to make a difference to patients, society and the planet.

In this role, you will work as part of the IT Quality Management Team within the Strategy, Performance & Quality Function in Global IT. You will ensure robust operational execution, aligned with AstraZeneca's business objectives. Your role will involve implementation of comprehensive SOx compliance strategies, fostering collaboration across departments to effectively mitigate risks. You will leverage your expertise to streamline processes, optimize audit efficiencies, and promote a culture of continuous improvement. Your leadership will be instrumental in guiding a high-performing team and facilitating productive relationships with internal and external stakeholders, including auditors and regulatory bodies.

Reporting to the Senior Director of IT Quality Management, this role encompasses the following core responsibilities:

Specialization in IT SOx, Compliance, and Risk: You will lead, manage, and develop the IT SOx Testing team. This team is responsible for delivering AstraZeneca’s Global IT SOx Testing plan, aligning with the IT Strategy and Operating Model.

Accountability for IT Policies and Engagement: You will structure and interpret high-level IT compliance policies and standards. Additionally, you'll proactively engage with IT and broader business sectors, partnering with IT groups and business areas. This ensures that IT operational controls align with the IT Strategy while fostering a culture of Quality and Compliance across IT.

Collaboration and Key Contact Role: In delivering the plan, you will work with teams across the AZ Enterprise. You will serve as a key contact between external Auditors and AZ’s IT SOx testing program.

Continuous Improvement Initiatives: The role will explore opportunities to implement Lean methodologies

Responsibilities:

• Lead the IT SOx Audit and Team Development: Drive operational activities for the external IT SOx audit, fostering strong relationships with AZ’s external auditors. Develop a high-performing global IT SOx Testing team and support the broader IT SOx community of control owners and operators.
• Provide Direction and Risk Mitigation: Leverage your industry and compliance experience to guide program/project managers and control owners in adopting a risk-based approach aligned with AZ IT Policies and Standards. Collaborate with business partners to translate and mitigate business risks through appropriate IT General Controls.
• Support for Testing and Audit Reviews: Ensure IT project deliverables are available for internal management testing and external audit reviews. Lead the annual Design Effectiveness Review process to maintain effective controls across a complex IT landscape.
• Global Plan and Documentation: Maintain a global plan to support IT SOx testing strategy delivery, ensuring all documentation is current and accessible. Manage, track, and report SOx Risks for inclusion in IT-wide Risk Management reporting.
• Enhance SOx Controls with Technology: Utilize technologies to improve audit efficiencies, ensuring they enhance the effectiveness and efficiency of the audit process.
• Performance Metrics and Continuous Improvement: Establish and track performance metrics for SOx testing activities, driving continuous improvement by analysing testing results to identify trends and areas for enhancement.
• Control Failures and Remediation Management: Prepare for and manage control failures related to SOx compliance. Develop and implement remediation plans to address any issues effectively, ensuring the swift resolution of incidents.

Essential Skills/Experience:

• Expert knowledge of Sarbanes-Oxley requirements and related auditing and accounting principles.
• Proven experience in implementing and managing ongoing compliance with SOx in large, complex IT environments.
• Technical proficiency in assuring and testing diverse technologies, including cloud-based applications, and evaluating third-party service auditor reports (SOC1, SOC2).
• Strong ability to lead and motivate global, cross-functional teams, fostering partnerships with IT, Quality & Compliance, and business units.
• Experience in managing compliance and assurance programs in a regulatory environment, applying frameworks such as ISO standards, ITIL, and Sarbanes-Oxley.
• Demonstrated capability to effectively communicate technical IT terms to non-technical audiences, engaging with senior leadership.
• Strategic thinker capable of analysing complex situations to make informed decisions and ensure compliance aligned with business objectives.
• Self-motivated with high drive and resilience, committed to achieving professional excellence.

Desirable Skills:

• Subject Matter Expert (SME) in IT general controls.
• Comprehensive understanding of end-to-end business processes and the role of IT in implementing business and automated process controls.
• Experience in the pharmaceutical industry, understanding its unique regulatory and compliance needs.
• Professional qualifications or certifications in IT compliance, risk management, or related areas (e.g., CISA, CRISC).
• Experience in a large audit/accountancy firm or substantial internal management controls testing in a global organization.

So, what’s next?

Complete your application before the below closing date.

We welcome your application no later than 9th April 2025

Where can I find out more?

Follow AstraZeneca on LinkedIn https://www.linkedin.com/company/1603/

Follow AstraZeneca on Facebook https://www.facebook.com/astrazenecacareers/

Follow AstraZeneca on Instagram https://www.instagram.com/astrazeneca_careers/?hl=en

Are you ready to make a difference? Apply today and join us in our mission to improve global public health!

AstraZeneca embraces diversity and equality of opportunity. We are committed to building an inclusive and diverse team representing all backgrounds, with as wide a range of perspectives as possible, and harnessing industry-leading skills. We believe that the more inclusive we are, the better our work will be. We welcome and consider applications to join our team from all qualified candidates, regardless of their characteristics. We comply with all applicable laws and regulations on non-discrimination in employment (and recruitment), as well as work authorization and employment eligibility verification requirements.