Summary

Location: Prague, Czech Republic

About the Role:
QNova is part of DD&IT ISC Function which ensures the Projects are delivered as part of Novartis Project Methodology, and is currently looking for a Sr Specialist DDIT ISC QNova. In this role, you will support the implementation of the information security, governance and strategy per the information management framework through business partnering.

About the Role

Key Responsibilities:

• Execute risk and compliance processes and oversight, operational tasks.
• Perform validation impact analysis and risk assessments, both high level and functional, to ensure requirements coverage. Author key validation deliverables, provide GxP related validation expertise and partner with key business stakeholders (i.e. Manufacturing, Quality, Validation, Risk and Compliance, etc.) in defining the CSV strategy.
• Own Document Management processes and create, review, update and approve CSV deliverables including Validation Assessment, Validation Plan, Test Plan, Qualification scripts (IQ, OQ, PQ), Test protocols and reports, Traceability Matrix and Validation Summary Report.
• Experience of SDLC (Waterfall or Agile methodologies or DevOPS) and responsible for tracking, monitoring and controlling validation process to ensure timely and cost-effective delivery of the system to the business users.
• Ensure implementation and monitoring of IT compliance, records management and information risk management during IT projects, to ensure the integrity, confidentiality and availability of information owned, controlled or processed by the organization.
• Evaluate the risks arising from control deficiencies, gaps and facilitates risk mitigation planning; support Audits, Inspections and Assessments performed by internal and external agencies.
• Manage appropriateness of preparation and readiness of the project for handover of the system/processes to the operational organization together with the project managers.
• Act as first point of contact for all quality related queries on the projects, follow-up resolution of identified quality exposures and escalation to line management if critical situations are not resolved in due course.
• Ensure adequate analysis have been performed for relevant testing conditions based on functional risk assessment, test overview list, test plan, test results, test deviations and change requests.
• Identify and log issues found during validation execution, perform root-cause analysis to define corrective and preventive measures to be taken and work closely with relevant product teams to prioritize and track validation incidents to closure.
• Performs EDI Integrations design and development and providing Technical Support to the team.

• Bachelor's degree in Engineering/Sciences or relevant technical experience
• 8+ years of working experience in IT Quality management / Information Security and Risk management / service delivery positions in regulated environment / pharma / life sciences
• Knowledge on Waterfall, Agile and DevOps methodology
• Experience working within the guidelines provided by regulatory agencies such as FDA, MHRA, etc. on one or more of the following areas: CFR Title 21 (parts 11, 210, and 211), Annex 11, GAMP, V-Model, CAPA, GxP (GMP, GLP, GCP, GVP, etc.), ERES regulations and Computer Systems Validation (CSV) coupled with ability to apply the same
• Familiar with compliance requirements (e.g. SOX, FDA/GxP, GQO, COBIT, Records Management, Privacy, Legal, BCM/Disaster Recovery)
• Working knowledge of Risk Management, Audit management and periodic or control maturity assessment with adequate understanding on Change Management and Change Control Procedures, Deviation Handling, and CAPA management.
• Risk management background with experience in risk management related roles.
• Knowledge of various Requirement management and Test management tools (like HPALM, Jira, Confluence, etc.) and templates used throughout the Pharmaceutical industry.
• Strong hands on experience in Development and Automation of Integration Solutions like EDI, API Management , Data Virtualization and (MFT) Managed File Transfer using products like IBM SI, AxwayB2Bi, APIGW and MFT and TIBCO's Data Virtualization
• Development experience in any Cloud technology AWS, Azure or GCP
• Strong hands on technical experience in managing platforms preferably on Linux OS and expertise in DevSecOps tool stack (Jenkins, Artifactory, Ansible)
• Excellent communication and senior stakeholder management skills, with experience working cross-functionally and transnationally.

• Audits Compliance, Communication, Compliance Assessments, Compliance Training, Influencing Skills, Quality Assurance (QA), Regulatory Compliance Management.