IT Compliance & Audit Support Specialist

CareDx is a leading precision medicine diagnostics company advancing care in transplant, specialty oncology, and cell therapy. Through innovative molecular diagnostics, digital health solutions, AI-powered data and analytics, and patient support services, CareDx partners with healthcare providers, patients, and biopharma organizations to inform clinical decision-making and improve patient outcomes.

At CareDx, every employee contributes to innovations that help transform patient care and improve lives.

This individual will play a key role in documenting technical systems, preparing for internal and external audits (including SOX), defining and standardizing account roles, and supporting system integrity through cleanup and access control initiatives. This person will champion system hygiene by identifying outdated, redundant, or improperly configured accounts, and will work with stakeholders to perform systematic cleanups. By doing so, they will help strengthen access controls, improve security posture, and optimize system performance. This role is not only tactical but strategic, contributing directly to CareDx’s commitment to security, compliance, and operational excellence in a regulated environment.

Responsibilities:

IT Systems Documentation

• Develop and maintain comprehensive documentation of enterprise IT systems, applications, data flows, and integrations.
• Collaborate with engineers and stakeholders to ensure documentation is up-to-date, versioned, and accessible.

SOX Audit Support

• Coordinate and prepare documentation for SOX audits, ensuring alignment with ITGC (IT General Controls) and access management policies.
• Assist in control testing, remediation tracking, and audit response efforts.

Account Role & Access Management

• Define, maintain, and optimize user roles, entitlements, and access control models across critical systems.
• Work with IT and Security teams to implement least-privilege and role-based access practices.

System Cleanup & Maintenance

• Identify and help remediate orphaned accounts, stale permissions, and unused resources.
• Propose and implement data quality standards and system hygiene practices.

Policy & Procedure Development

• Assist in creating and revising IT policies, SOPs, and operational playbooks.
• Ensure compliance with regulatory and internal security standards.

Collaboration & Project Participation

• Partner with IT, InfoSec, Internal Audit, and other departments on cross-functional initiatives.
• Participate in IT compliance and infrastructure projects by providing documentation and control input.