Zentalis Pharmaceuticals

Compliance

• Own and continuously evolve the IT governance framework aligned with COBIT, ITIL, or equivalent standards; set multi-year roadmap for IT GRC maturity.
• Establish, maintain, and enforce IT policies, standards, and procedures in alignment with business objectives and regulatory requirements.
• Lead the IT Governance Committee; prepare Board-and executive-level reporting on governance posture, KPIs, and strategic risk.
• Drive IT portfolio governance to ensure alignment of technology investments with enterprise strategy and risk appetite; partner with Finance on IT spend decisions.
• Lead the enterprise IT risk management lifecycle: identification, assessment, treatment, monitoring, and reporting.
• Maintain and continuously update the IT risk register; escalate critical risks to senior leadership and the Board, as appropriate.
• Partner with business units to conduct risk-based vendor and third-party assessments for critical technology partners and SaaS providers.
• Own and manage IT compliance programs across GxP (21 CFR Part 11, Annex 11), SOX ITGCs, HIPAA, NIS2 Directive, and applicable data privacy regulations (GDPR, CCPA, when applicable).
• Serve as the primary IT point of contact for internal and external auditors; coordinate IT audit requests, responses, and remediation.
• Lead IT General Controls testing and documentation for SOX compliance cycles; partner with Finance and External Audit.
• Participate in GxP computer system validation (CSV) oversight in coordination with QA — including URS, IQ/OQ/PQ documentation, and periodic reviews.
• Track and drive closure of all IT audit findings, control deficiencies, and corrective and preventative actions (CAPAs).
• Develop and maintain the IT policy library; ensure timely review cycles and version control.
• Drive an IT compliance awareness culture through training programs, communications, and onboarding curriculum.
• Advise IT project teams and technology owners on control requirements during system design and implementation.

Director, IT – Governance, Risk & Compliance