Head of IT Governance, Risk, Compliance

This is a fully remote position, open to applicants in Tennessee.

📋 Description

• Establish and enhance LabConnect’s IT Governance, Risk, and Compliance function.

• Lead the strategy and operational framework for AI-driven GxP compliance.

• Implement AI and agentic tools to create and maintain SOPs and controlled documentation.

• Identify compliance gaps within code, configuration, infrastructure, and documentation.

• Define rules for agentic development, policy-as-code, human review checkpoints, and automated compliance verifications.

• Oversee AI adoption in internal processes and product development.

• Set standards for validation, human oversight, transparency, monitoring, and auditability of AI.

• Evaluate and enhance controls in alignment with SOC 2, HIPAA, GDPR, and FDA 21 CFR Part 11.

• Execute automated evidence gathering and continuous monitoring of controls.

• Provide governance for access, endpoint, virtual desktop, remote work, and BYOD settings.

• Enhance data classification, monitoring, and loss-prevention strategies.

• Assess risks associated with third-party vendors, service providers, AI models, and agentic tools.

• Collaborate with infrastructure, security, engineering, data, quality, operations, and business leaders.

• Partner with the Quality team to ensure IT controls, automated evidence, and AI-supported documentation fulfill validation-grade standards.

⛳️ Requirements

• A bachelor’s degree in computer science, engineering, information systems, or a related discipline is essential.

• Over 15 years of progressive leadership experience in IT security, risk management, compliance, or GRC.

• Responsible for managing a regulated control environment.

• Proven history of building effective teams and leading significant transformations.

• Experience in senior executive or enterprise leadership roles with accountability for compliance strategy, organizational capability, and audit results.

• Background in integrating AI or intelligent automation into compliance, quality, or regulated documentation workflows, ensuring adoption and acceptance by auditors.

• Practical knowledge of source control, CI/CD, infrastructure-as-code, AI-assisted development, and agentic methodologies.

• Strong understanding of data architecture and governance, encompassing relational, unstructured, blob, and vector-based data models.

• Extensive experience in Microsoft Azure environments, including Purview, Entra ID, Defender, Azure Data Lake, and Azure AI services.

• Proven success in audits and inspections relating to SOC 2, HIPAA, GDPR, or FDA 21 CFR Part 11.

• Experience in regulated sectors such as healthcare, life sciences, or clinical research is highly preferred.

• In-depth knowledge of SOC 2, ISO 27001, HIPAA, GDPR, NIST AI Risk Management Framework, and ISO/IEC 42001.

• Familiarity with GxP, FDA 21 CFR Part 11, computer system validation, and risk-based computer software assurance.

🏝️ Benefits

• Annual incentive potential through the company's bonus program.

• Comprehensive benefits package.