Senior IT Internal Auditor

About Us:

Rent the Runway (RTR)  is transforming the way we get dressed by pioneering the world’s first Closet in the Cloud. Founded in 2009, RTR has disrupted the $2.4 trillion fashion industry by inspiring women with a more joyful, sustainable and financially-savvy way to feel their best every day. As the ultimate destination for circular fashion, the brand now offers infinite points of access to its shared closet via a fully customizable subscription to fashion, one-time rental or ownership. RTR offers designer apparel and accessories from hundreds of brand partners and has built in-house proprietary technology and a one-of-a-kind reverse logistics operation. Under CEO and Co-Founder Jennifer Hyman’s leadership, RTR has been named to CNBC’s “Disruptor 50” five times in ten years, and has been placed on Fast Company’s Most Innovative Companies list multiple times, while Hyman herself has been named to the “TIME 100” most influential people in the world and as one of People magazine’s “Women Changing the World.”

Galway Office 

Rent The Runway established its European Technology Hub in Galway in April 2019.  Based in the historic Claddagh area of the city, the growing team in Galway tackles core technology challenges and influences the next generation of services critical to Rent The Runway’s success and continued growth. 

The Galway office is Rent the Runway's first international office outside the US and enables the company to significantly expand its Software Engineering, Product Development, Machine Learning Engineering and Data Science footprint. Rent The Runway’s Galway-based employees have the opportunity to grow their careers across several roles and career paths in Technology.

Our engineering team is smart, pragmatic, and entrepreneurial. We practice continuous integration & test-driven development, engage in constant peer code reviews & pair programming, and work hard to give back to the software community through open-source contributions.

The Mission:

At Rent The Runway, Internal Audit is the primary guardian of our financial integrity. Our mandate is clear: we lead the management assessment of internal controls over financial reporting (ICFR) to provide the Audit Committee and executive leadership with confidence in the controls over our systems and the information they report. We don’t just find gaps; we ensure our technology stack is resilient and compliant.

About the Role:

Reporting directly to the VP of Internal Audit based in New York, you will serve as the subject matter expert for IT General Controls (ITGC) and Automated Application Controls. This is a high-visibility, third-line of defence role where you will own the SOX lifecycle for our technology environment from initial risk assessment and scoping to final deficiency evaluation and remediation. 

You will partner closely with our 2nd Line of Defence (Senior Compliance Analyst) to align on risk assessments and control frameworks. While maintaining independence, you will leverage 2nd Line monitoring results to sharpen audit scoping and ensure a unified approach to SOX compliance. You will also collaborate with the Senior Compliance Analyst to bridge the gap between 'finding' a deficiency and 'fixing' it. You will work in tandem to ensure that remediation plans are not only effective for SOX compliance but are also operationally sustainable for the IT organisation.

What You’ll Do:

• Support the IT SOX Lifecycle: Manage the end-to-end execution of IT SOX testing, including planning, walkthroughs, and substantive testing of ITGCs across Access Management, Change Management, and IT Operations.
• Analyse Critical Systems: Evaluate Automated Application Controls and Key Reports (IPE/IUC) to ensure the accuracy and completeness of data flowing into financial statements.
• Bridge the Gap: Translate complex technical risks into clear business impacts for stakeholders. You will document detailed process narratives and flowcharts that identify where "what could go wrong" (WCGW) meets a key control.
• Quality & Methodology: Build and maintain workpapers that meet the highest standards.

About You:

• The Foundation: You hold a Bachelor’s degree in Management Information Systems, Computer Science, Accounting, or a related field.
• The Credentials: You are a CISA, CISM, or CISSP (or are actively pursuing one).
• The Experience: You bring 3+ years of dedicated IT SOX 404 experience, ideally from a Big 4 or second-tier public accounting firm.
• The Diplomat: You possess the "auditor’s touch"—the ability to build rapport with IT process owners and our Senior Compliance Analyst while maintaining the independence required to deliver unbiased testing conclusions and audit findings.
• The Solution-Oriented Mindset: You are not just a "box-checker." You approach SOX with a desire to help the business find a sustainable, automated way to maintain its compliance obligations.

Benefits:

At Rent the Runway, we’re committed to the happiness and well-being of our employees, and aim to create a workplace that fosters both personal and professional growth. Our inclusive benefits include, but are not limited to:

• Generous Paid Time Off, including annual leave, paid bereavement, and family sick leave - every employee needs time to take care of themselves and their family.
• Universal Paid Parental Leave for both parents + flexible return to work program  - because we know your newest family member(s) deserve your undivided attention.
• Paid Sabbatical after 5 years of continuous service - unplug, recharge, and have some fun.
• Competitive Stakeholder Pension - taking care of your future. 
• Comprehensive health, dental care and dependents care from day 1 of employment - Your health comes first, and we’ve got you covered. 
• Company-wide events and outings - our team spirit is no joke - we know how to have fun!
• Hybrid Work -This hybrid role requires 2-3 days per week in our Galway, Ireland office, with the option to work 2 days remotely.

Rent the Runway is an equal opportunity employer. In accordance with applicable law, we prohibit discrimination against any applicant or employee on any legally recognised basis, including, but not limited to: gender, marital status, family status, age, disability, sexual orientation, race, religion, and membership of the Traveller community.

#LI-EM1

About the Role >>> Associate Director, GMP Quality – Qualified Person

As the Qualified Person (QP), reporting to the Senior Director, Quality Assurance based in San Francisco, California, USA you will hold responsibility for ensuring that Clinical and Commercial medicinal products are manufactured, tested and released in compliance with applicable regulatory requirements of the European Union. You will also ensure that the products are prepared for certification by QPs of the United Kingdom and Israel and are compatible with U.S requirements.

You will be responsible for conducting Supplier and Contract Service Provider audits within the European Economic Community and other geographies. You will monitor changes to European regulatory requirements and host any inspections conducted by the Health Product Regulatory Authority (HPRA) or other Competent Authorities of the European Union. You will be an integral participant in annual Quality System reviews, including Quality Management Review (QMR) and Annual Product Reviews (APRs) following commercial launch. You will work closely with our European CDMOs may also support the processing of European Product Complaints.

This role is based out of our Dublin, Ireland office location and will require up to 25% travel, including some international.

Your work will primarily encompass:

Batch Certification

• Ensure all manufacturing and testing activities comply with approved procedures, Investigational Medicinal Product Dossiers and regulatory standards
• Ensure that outsourced manufacturing and testing activities meet GMP and quality standards
• Act as the legally accountable person for batch certification (as per Directive 2001/83/EC, where applicable)
• Certify and release batches of medicinal products in accordance with EU GMP, Marketing Authorization (MA), and regulatory requirements

Supplier Quality Management

• In conjunction with U.S. based Compliance functions, provide Supplier and CSPs quality and compliance oversight
• Establish appropriate assessment mechanisms, risk-based controls, and monitoring and feedback loops to ensure compliant, effective oversight
• Serve as a resource for the conduct of audits and other assessments of both suppliers and business partners
• Process Supplier Corrective Action Requests (SCARs) and External Change Notifications (ECNs)

And will also include:

Inspection Readiness

• Establish and maintain the infrastructure and processes required to prepare Olema’s European affiliate for HPRA and other Competent Authorities of the European Union
• Utilize electronic systems, including Artificial Intelligence–enabled tools, to support inspection readiness activities
• Utilize Inspection Management Software to ensure consistent and reliable inspection preparation and response
• Perform Mock Inspections at European Suppliers / CSPs / Partners

Regulatory Intelligence and Monitoring

• Monitor local and European regulatory authorities for proposed GMP rulemaking and or trends in regulatory inspections
• Monitor inspectional status and compliance trends within the Olema European Supplier and CSP network

Annual Reviews and Quality System Leadership

• Participate in the annual Quality Management Review process
• Participate in the execution of Annual Product Quality Reviews upon commercial product launch
• Collaborate with Quality Systems to plan and deliver annual GxP topical training for relevant functions on European topics

As this is a new office, there may be other assignments and projects as required.

Ideal Candidate Profile >>>

A strong contributor with in-depth knowledge. A confident professional with a solid understanding of EU and UK regulatory GMP compliance requirements. A team-oriented individual with solid ability to communicate across multiple time zones, strong work ethic, optimism, and commitment to meaningful contributions. As such, we are looking for someone with the right combination of qualifications, knowledge, experience, and attributes for this role.

A love of challenging, important work. We are a pragmatic team, driven to imagine and develop meaningful therapies for improving lives. All employees within our company play a unique and crucial role in our success, both in accomplishing our mission and building a positive company culture. As such, we are looking for someone with the right combination of knowledge, experience, and attributes for this role.

Qualifications

• Eligible to act as a Qualified Person under EU legislation (Directive 2001/83/EC)
• Pharmaceutical Quality System (PQS) Auditor certification is highly preferred

Knowledge

• Bachelor's degree in pharmacy, chemistry, biology or a related scientific field is required
• Strong understanding of EU and Rest-of-World (ROW) regulatory and compliance requirements
• Demonstrated experience in Supplier Compliance and Inspection Management
• Firm knowledge of GMPs, GDPs and Quality Management Systems
• Experience using Inspection Management Software

Experience

• Minimum 10 years of experience in Biopharmaceutical industry
• Minimum 7 Years of experience in Supplier Quality Management
• Minimum 3 Years of experience with Oral Solid Dosage forms
• Minimum 4 Years of experience in a Qualified Person role
• Oncology experience is desirable

Attributes

• Self-directed and capable of independently setting and managing priorities
• Able to adapt to a rapidly changing organization characterized by ambiguity and evolving process definition
• Demonstrates strong cross-functional collaboration, and communication skills
• Comfortable adopting new technologies and tailoring them to Olema’s Quality and Compliance needs
• Critical thinking, able to identify the gates required for QP certification
• Passionate about meaningful work and contributing to patient-focused outcomes

#LI-MK1

Purpose of Role 

The Operational Risk Associate will be part of the wider Enterprise Risk / Operational Risk function and support the team in further developing and managing operational risks across all business functions.

The position will report to the Head of Enterprise/Operational Risk.

Key Responsibilities  

• Support the development and implementation of Pantheon’s global operational risk frameworks and policies and procedures for adoption by Pantheon Group entities
• Support the ISAE 3402/SSAE 16 annual processes including completion of the document, drafting of controls wording and providing external auditor with supporting information.
• Support process and control reviews to identify risks and issues in Pantheon’s control environment. Reviews will include identified areas of risk, monitoring programme and new business processes.
• Manage Error/Incident reporting process including reporting to management and resolution of any issues. Ensure monitoring procedures are in line with Pantheon’s risk policies. Direct investigation of serious error or breaches and make recommendations for change to management
• Co-ordinate and assist in providing risk oversight and governance across third party supplier relationships of all Pantheon Group entities
• Support business continuity process including BCP and testing programme.
• Support to manage various risk-related frameworks such as the data privacy / data protection, vendor risk, Insurance risk, and assist with any client / business related queries
• Support and further develop a centralised library of processes, risks and controls in a strategic risk system

Skills and Experience Required  

• Degree level education
• Experience of working in a risk function ideally in an investment banking, asset management, private equity environment
• Understanding of investment management and products
• Ability to work on own initiative and in team
• Ability to identify when issues should be escalated for further discussion
• Controls awareness
• Keen problem-solving skills, ability to offer solutions to issues

#LI-SB1