Compliance Officer

Job description

At Roche you can show up as yourself, embraced for the unique qualities you bring. Our culture encourages personal expression, open dialogue, and genuine connections, where you are valued, accepted and respected for who you are, allowing you to thrive both personally and professionally. This is how we aim to prevent, stop and cure diseases and ensure everyone has access to healthcare today and for generations to come. Join Roche, where every voice matters. The PositionKey Roles Compliance: Serves as a strategic business partner to embed integrity across all functions through policy guidance, standard procedures, and ongoing employee/partner training. Monitoring, Audit & Risk Management: Operates independently to evaluate risks, audit controls, address compliance gaps, and enforce internal SOPs to ensure strong risk governance. Legal: Acts as the primary liaison with regional legal leadership and external counsel to minimize risk exposure and ensure contract compliance. SHE & Business Continuity: Leads safety, health, environmental compliance, and business continuity planning to protect workforce well-being and operational resilience. Data Privacy Officer: Ensures strict compliance with local data protection laws (e.g., PDPA) and internal Roche privacy guidelines. Responsibilities & Accountabilities1. ComplianceStrategic & Advisory Act as a compliance business partner to all functions, providing guidance and answering questions regarding defined compliance standards Promote high standards of integrity and actively foster a mindset and culture of compliance within the organization and with key external business partners (e.g., distributors, suppliers and customers) Develop an internal and external compliance and legal network, and closely monitor changes in relevant global, regional, and local legal, industry and regulatory requirements and standards Ensure compliance with global guidelines (e.g., Code of Conduct, Global Directives) and local laws/regulations through adequate procedures and process controls Build a thorough business understanding and internal network to provide adequate support and stay informed about planned/executed activities Maintain high-level responsibility for all aspects of Compliance & Legal risks, including Risk Management, Business Continuity and specific Roche guidelines (e.g., Data Privacy, Interactions with HCPs & HCOs, Contract Management, etc.) Policy & Documentation Management Take ownership of internal policies, procedures and SOPs to ensure they enforce compliance and adequate control Maintain and enhance existing compliance tools, driving initiatives for new systems or simplification, and maintaining the compliance intranet/touchpoint with the latest information Take ownership of global, regional or local projects related to compliance tools and processes Training & Communication Define local training plans aligned with global/regional strategies, adapt the training assignment matrix, and tailor/create compliance training material for all functions Ensure all employees and external business partners are trained appropriately and that training records are maintained Develop, deliver and maintain communication to continuously improve local organization’s compliance awareness and knowledge Develop and provide training to system users Investigation & Legal Support Lead local investigations, ensuring adequate handling and documentation of non-compliance (e.g., BEIR reporting) and support the People & Culture team with labor issues related to business ethics and integrity Work with Head of Legal APAC to advise all functions on legal matters and liaise with external legal firms where needed to minimize legal risk exposure Coordinate interaction with and support from external legal counsel, in alignment with Head of Legal APAC Maintain oversight of training and compliance initiatives and monitoring programs, providing regular updates to the Local Compliance Committee and Management 2. Monitoring, Audit and Risk ManagementOperate as an independent function to assure senior management that business activities are executed within an adequate control framework and under consideration of associated risks Ensure adequate business process controls and risk management. Drive initiatives to timely identify and close gaps within local policies, processes, procedures, and systems Ensure regular and detailed review of key business transactions (e.g., T&E, Marketing Activities, Sponsorships). Perform compliance reviews of activities in accordance with local SOPs and conduct ad-hoc deep-dive monitoring where necessary Provide management with summaries of key transaction reviews, documentation, and reports on unusual observations. Ensure awareness of internal reviews and provide guidance on handling future cases Take ownership of internal/local policies, procedures, SOPs, and the compliance (e.g., HCP/HCO) database to ensure adherence to standards and adequate controls Lead audits (e.g., Group Corporate Audit, external business partner due diligence, internal audits) Conduct a periodic (at least once a year) comprehensive compliance and legal risk assessment to identify potential areas of vulnerability Define a Compliance & Risk Monitoring Program, ensuring key corrective action plans are established, followed up, monitored, and tracked in line with global/regional mandates Ensure adequate tracking of action plans resulting from internal and external audits to ensure timely implementation Perform ad-hoc audits and continuously monitor the effectiveness of internal controls Ensure timely follow up and updates on monitoring findings and remedial plans/actions Core CompetenciesSystem Thinking: Explain and hold the big picture, connect the dots, evolve organizational systems so that they produce envisioned results, simplify overly complex processes, anticipate future consequences to current action Creative Thinking: Bring in new solutions and ideas, find breakthrough strategies and solutions, be open to try out new ways and new ideas Strategic Mindset: Do not get overly caught-up in short-term firefighting and are able to devote adequate attention to strategic initiatives, have a good sense for what will work in the marketplace, be rigorous in your analysis of data used for planning, have a good process in place for maintaining an ongoing strategic perspective within the organization, ask questions about the strategic implications of day-to-day decisions being made Risk Management: The ability to audit internal processes, identify "gaps" in adherence, and mitigate risks before they lead to legal penalties Ethical Leadership: Acting as the organization's moral compass, managing whistleblower programs, and conducting fair internal investigations Data Privacy & Transparency: Ensuring strict protection of patient data and accurate reporting of payments made to HCPs Strategic Communication: Translating complex compliance requirements into practical guidance and training for employees Business Partnership: Being a business partner to help the company reach commercial goals without compromising integrity. Driven by purpose, pragmatic, ability to resolve conflicts and adaptability to change QualificationsExpert in health care compliance management including auditing experience Thorough pharma business understanding as well as relevant key business process controls Team player and strong ability to drive results through collaboration across various functions Ability to handle ambiguity and complex compliance / legal / business topic High integrity standards and distinct attitude to speak-up Proven leadership and management skills Excellent communication skills and fluent in English and Thai Who we areA healthier future drives us to innovate. Together, more than 100’000 employees across the globe are dedicated to advance science, ensuring everyone has access to healthcare today and for generation