IT SOX 管理员
IT SOX Admin
CareDx 是一家领先的精准医疗诊断公司,在移植、专科肿瘤学和细胞治疗领域推动医疗进步。通过我们创新的分子诊断产品组合、数字健康解决方案、AI 驱动的数据与分析以及患者支持服务,我们与医疗机构、患者和生物制药组织合作,帮助指导临床决策并改善患者结果。
在 CareDx,每位员工都有机会参与推动患者护理变革和改善生命的创新。
该职位将负责记录技术系统、准备内部和外部审计(包括 SOX),定义并标准化账户角色,并通过清理和访问控制计划来支持系统完整性。该人员将通过识别过时、冗余或配置不当的账户来推动系统卫生管理,并与相关方合作进行系统性清理。通过这些工作,他们将有助于加强访问控制、提升安全态势并优化系统性能。该职位不仅具有战术性,还具有战略性,直接为 CareDx 在受监管环境中的安全、合规和运营卓越承诺做出贡献。
职责:
IT 系统文档
- 编写并维护企业 IT 系统、应用程序、数据流和集成的完整文档。
- 与工程师和相关方协作,确保文档保持最新、版本可控且易于访问。
SOX 审计支持
- 协调并准备 SOX 审计文档,确保符合 ITGC(IT 通用控制)和访问管理政策。
- 协助控制测试、补救跟踪和审计响应工作。
账户角色与访问管理
- 在关键系统中定义、维护和优化用户角色、权限和访问控制模型。
- 与 IT 和安全团队合作,实施最小权限和基于角色的访问实践。
系统清理与维护
- 识别并协助修复孤立账户、过期权限和未使用的资源。
- 提出并实施数据质量标准和系统卫生实践。
政策与流程开发
- 协助制定和修订 IT 政策、标准操作流程(SOP)和操作手册。
- 确保符合监管和内部安全标准。
协作与项目参与
- 与 IT、信息安全部门、内部审计和其他部门合作
查看英文原文
CareDx is a leading precision medicine diagnostics company advancing care in transplant, specialty oncology, and cell therapy. Through our innovative portfolio of molecular diagnostics, digital health solutions, AI-powered data and analytics, and patient support services, we partner with healthcare providers, patients, and biopharma organizations to help inform clinical decision-making and improve patient outcomes.
At CareDx, every employee has the opportunity to contribute to innovations that help transform patient care and improve lives.
This individual will play a key role in documenting technical systems, preparing for internal and external audits (including SOX), defining and standardizing account roles, and supporting system integrity through cleanup and access control initiatives. This person will champion system hygiene by identifying outdated, redundant, or improperly configured accounts, and will work with stakeholders to perform systematic cleanups. By doing so, they will help strengthen access controls, improve security posture, and optimize system performance. This role is not only tactical but strategic, contributing directly to CareDx’s commitment to security, compliance, and operational excellence in a regulated environment.
Responsibilities:
IT Systems Documentation
- Develop and maintain comprehensive documentation of enterprise IT systems, applications, data flows, and integrations.
- Collaborate with engineers and stakeholders to ensure documentation is up-to-date, versioned, and accessible.
SOX Audit Support
- Coordinate and prepare documentation for SOX audits, ensuring alignment with ITGC (IT General Controls) and access management policies.
- Assist in control testing, remediation tracking, and audit response efforts.
Account Role & Access Management
- Define, maintain, and optimize user roles, entitlements, and access control models across critical systems.
- Work with IT and Security teams to implement least-privilege and role-based access practices.
System Cleanup & Maintenance
- Identify and help remediate orphaned accounts, stale permissions, and unused resources.
- Propose and implement data quality standards and system hygiene practices.
- Policy & Procedure Development
- Assist in creating and revising IT policies, SOPs, and operational playbooks.
- Ensure compliance with regulatory and internal security standards.
Collaboration & Project Participation
- Partner with IT, InfoSec, Internal Audit, and other departments on cross-functional initiatives.
- Participate in IT compliance and infrastructure projects by providing documentation and control input.
Minimum Education, Experience, & Specialized Knowledge (Required):
- Bachelor's degree in Information Systems, Computer Science, or equivalent work experience.
- 2–5 years of experience in IT compliance, system documentation, or audit support.
- Knowledge of SOX compliance, ITGCs, and role-based access control frameworks.
- Familiarity with identity management tools (e.g., Okta, Active Directory).
- Excellent written communication and organizational skills.
- Experience working in regulated environments (healthcare, biotech, finance) is a plus.
- Experience with ERP or other finance systems such as NetSuite or Coupa
Additional Details:
Every individual at CareDx has a direct impact on our collective mission to improve the lives of organ transplant patients worldwide. We believe in taking great care of our people, so they take even greater care of our patients.
Our competitive Total Rewards package for US Employees includes:
- Competitive base salary and incentive compensation
- Health and welfare benefits, including a gym reimbursement program
- 401(k) savings plan match
- Employee Stock Purchase Plan
- Pre-tax commuter benefits
- And more!
- Please refer to our page to view detailed benefits at https://caredx.com/company/careers
In addition, we have a Living Donor Employee Recovery Policy that allows up to 30 days of paid leave annually to a full-time employee who makes the selfless act of donating an organ or bone marrow.
With products that are making a difference in the lives of transplant patients today and a promising pipeline for the future, it’s an exciting time to be part of the CareDx team. Join us in partnering with transplant patients to transform our future together.
CareDx, Inc. is an Equal Opportunity Employer-vets/disabled, and participates in the E-Verify program. By proceeding with our application and submitting your information, you acknowledge that you have read our U.S. Personnel Privacy Notice and consent to receive email communication from CareDx. Certain jurisdictions require notice of how we use and protect your personal information. For more information, please read our Privacy Policy
The U.S. EEO posters are available here.
Note: We do not accept resumes from headhunters, placement agencies, or other suppliers that have not signed a formal agreement with us.
#LI-REMOTE
This is the anticipated base salary range in the United States. The final salary offered to a successful candidate will be dependent on several factors that may include, but are not limited to, the type and length of experience within the job, the type and length of experience within the industry, education, etc. Base pay is one part of the Total Package that is provided to compensate and recognize employees for their work, and this role may be eligible for additional discretionary bonuses/incentives and restricted stock units. CareDx is a multi-state employer, and this salary range may not reflect positions that work in other states.
Remote: US only roles
$80,000—$100,000 USD