Director, Technology Compliance

Our company's Information Technology division is a dynamic, high-energy team that partners with business colleagues worldwide to serve our patients and customers. We are dedicated to leveraging technology to drive efficiency, productivity, and innovation in advancing our company's contribution to global health.

The IT Governance, Risk, and Compliance (IT GRC) organization is a critical part of the IT enterprise. We are seeking a visionary leader for the position of Director, Technology Compliance. This leader will be responsible for managing a global team of experts who provide essential compliance services that enable our company's IT organization to operate efficiently while meeting its regulatory and internal policy obligations.

This role requires a strategic leader who can navigate a complex, regulated environment, drive process efficiency, and build strong relationships with stakeholders across the company, including Quality, Corporate Audit, and divisional IT organizations. The ideal candidate will have a deep understanding of IT controls, compliance frameworks, and risk management in the life sciences industry. This position reports to the Executive Director, IT GRC.

Primary Responsibilities:

• Strategic Team Leadership: Provide strategic direction and leadership for the Technology Compliance team, which acts as the SDLC and IT Controls subject matter experts. Hold full accountability for the service line's resource management and talent development. This is a 30+ person team operating in all regions

Below are the service offerings for the team

• Compliance Guidance & Advisory: Oversee IT GRC's SDLC advisory service to enable IT customer success by making SDLC and IT Controls compliance simple to execute.
• Emerging Technology Governance: Provide thought leadership and direction on the application of SDLC and IT Controls for emerging technologies and large company initiatives with technology components.
• Execution & Delivery: Direct core operational compliance functions, including the Compliance Validation Service, IT Controls implementation, Compliance Issue management, and Infrastructure Oversight.
• Audit Coordination & Readiness: Oversee the IT audit support function that serves as the primary liaison and facilitator for internal and external audits. Drive continuous audit readiness through robust controls assessments and preparation for internal audits and external inspections.
• Compliance Monitoring & Automation: Partner with risk and compliance technology teams to improve adoption of those tools and to provide valuable user feedback for continuous improvement.
• Training & Awareness: Drive policy and controls training and awareness programs across the IT enterprise to build a proactive culture of compliance.
• Stakeholder Engagement: Build and maintain strong, collaborative relationships with key stakeholders across IT, Quality, Finance, and the business to ensure alignment on compliance objectives and risk posture., Auditing Coaching Operations Management Quality Control Business Metrics Quality Assurance Performance Review Influencing Skills Training And Development Influencing Without Authority Continuous Improvement Process +0

Auditing Energetic Visionary Leadership Management Automation Innovation Negotiation Coordinating Communication Life Sciences IT Governance Collaboration User Feedback Accountability Business Acumen Risk Management Problem Solving Team Leadership Computer Science Asset Management Issue Management Audit Management Internal Auditing Analytical Skills External Auditing Service Offerings IT Risk Management Strategic Planning Product Management Thought Leadership Talent Development Resource Management Continuous Auditing Benefits Management Strategic Leadership Emerging Technologies Information Technology Stakeholder Engagement Regulatory Environment Relationship Management Requirements Management Stakeholder Communications Customer Success Management Continuous Improvement Process Systems Development Life Cycle Software Development Life Cycle Sarbanes-Oxley Act (SOX) Compliance Governance Risk Management And Compliance, * Bachelor's degree in Information Technology, Computer Science, or a related field.

• 10-12 years of experience in IT, with a significant focus on IT risk management, audit, and compliance.
• Demonstrated experience in the Life Sciences industry and a deep understanding of the associated regulatory environment (e.g., GxP, SOX).
• Proven experience leading and managing , global teams, including cross-functional project teams.
• Deep understanding of IT controls, compliance frameworks (e.g., COBIT, ITIL), Software Development Lifecycle (SDLC), and risk management concepts.
• Strong business acumen with proven influencing and negotiation skills.
• Excellent problem-solving and analytical skills with the ability to navigate ambiguity and drive innovative solutions.
• Executive presence with outstanding communication skills; ability to articulate complex compliance topics clearly and concisely to senior management and broad audiences.
• Proven track record of managing stakeholder relationships and driving alignment between IT, audit, and business functions.

Required Skills: Asset Management, Audit Management, Benefits Management, Business Acumen, Compliance Frameworks, Compliance Software, Computer Science, Global Health, Information Technology (IT) Risk Management, IT Governance, IT Governance Risk and Compliance (GRC), Management System Development, Product Management, Requirements Management, Stakeholder Engagement, Stakeholder Relationship Management, Strategic Leadership, Strategic Planning, System Designs, Detail Oriented Microsoft Excel Managed Markets Microsoft Visio Decision Making Process Control Digital Controls Internal Auditing Microsoft Outlook External Auditing Influencing Skills Financial Controls Microsoft PowerPoint Microsoft SharePoint Information Gathering Information Technology Stakeholder Engagement Ability To Meet Deadlines Verbal Communication Skills Influencing Without Authority, Energetic Visionary Leadership Management Automation Innovation Negotiation Coordinating Communication Life Sciences IT Governance Collaboration User Feedback Accountability Business Acumen Risk Management Problem Solving Team Leadership Computer Science Asset Management Issue Management Audit Management Internal Auditing Analytical Skills External Auditing Service Offerings IT Risk Management Strategic Planning Product Management Thought Leadership Talent Development Resource Management Continuous Auditing Benefits Management Strategic Leadership Emerging Technologies Information Technology Stakeholder Engagement Regulatory Environment Relationship Management Requirements Management Stakeholder Communications Customer Success Management Continuous Improvement Process Systems Development Life Cycle Software Development Life Cycle Sarbanes-Oxley Act (SOX) Compliance Governance Risk Management And Compliance

Merck & Co., Inc., Rahway, NJ, USA, also known as Merck Sharp & Dohme LLC, Rahway, NJ, USA, does not accept unsolicited assistance from search firms for employment opportunities. All CVs / resumes submitted by search firms to any employee at our company without a valid written search agreement in place for this position will be deemed the sole property of our company. No fee will be paid in the event a candidate is hired by our company as a result of an agency referral where no pre-existing agreement is in place. Where agency agreements are in place, introductions are position specific. Please, no phone calls or emails.