Introduction
Drug shortages used to be treated as a manufacturing and supply chain problem that regulatory affairs heard about after the fact, usually when a site inspection finding or a quality deviation turned into a shortfall. That has changed. Since the Food and Drug Omnibus Reform Act (FDORA) was signed into law in late 2022, FDA has been building out a more formal shortage prevention framework, and a meaningful share of the new obligations land squarely on regulatory affairs desks rather than staying inside quality or supply chain functions alone. If you have noticed job postings that blend "regulatory affairs" with "supply chain resilience" or "shortage risk management" in the title, this is why.
This article walks through what the shortage prevention and resilience requirements actually require, why regulatory affairs ends up owning pieces of the work, and what the resulting jobs look like day to day.
What Changed and Why It Pulled Regulatory Affairs In
FDORA directed FDA to require certain application holders, primarily for drugs FDA designates as critical to public health, to conduct and maintain risk management plans that identify, assess, and mitigate the risk of a supply disruption. It also expanded the redundancy risk assessment requirement that already existed for active pharmaceutical ingredient (API) sourcing, and it tightened the timelines and content expected in shortage notifications that manufacturers must submit to FDA under existing shortage reporting statutes.
None of that language mentions job titles, but the practical effect is that the risk management plan, the redundancy assessment, and the notification obligations all have to be tied back to the regulatory status of the product: which application it sits under, what supplements or changes would be needed to bring an alternate site or alternate supplier online, and how quickly a manufacturing change could actually be implemented given CMC and post-approval change requirements. That is regulatory affairs' native territory. Supply chain and quality can identify where a single point of failure exists; regulatory affairs is the function that can tell the business how long it would take to fix it and what filing pathway that fix requires.
Where the New Work Actually Sits
In practice, the shortage resilience mandate has created work in a few recognizable places rather than a single new job title:
- CMC and post-approval change specialists are increasingly asked to pre-stage the regulatory pathway for backup manufacturing sites and alternate API suppliers before a shortage happens, not after, so that a prior approval supplement or changes-being-effected filing is ready to move quickly if a primary site goes down.
- Regulatory intelligence and policy roles are tracking FDA's evolving critical drug lists, guidance on redundancy risk assessments, and the shortage notification portal requirements, then translating that into internal playbooks.
- Submissions and labeling teams get pulled in when a shortage mitigation strategy involves importing a foreign-approved version of a product, since that typically requires temporary labeling and packaging accommodations cleared through FDA.
- Newer, hybrid roles with titles like "regulatory affairs manager, supply resilience" or "director, product continuity" have started appearing at larger manufacturers and CDMOs, combining regulatory strategy with supply chain risk assessment in a single seat.
What ties these together is that the work is preventive rather than reactive. A regulatory affairs professional doing shortage resilience work spends less time responding to an active shortage and more time building the regulatory readiness that keeps a potential shortage from becoming an actual one.
The Skills That Actually Matter Here
This niche rewards a specific combination of skills that not every CMC specialist has developed:
- Post-approval change classification. Knowing, precisely, which manufacturing or supplier changes require prior FDA approval versus which can move under a changes-being-effected or annual reportable pathway is the difference between a resilience plan that is theoretical and one that can actually be executed under time pressure.
- Cross-functional fluency with supply chain and quality. Redundancy risk assessments are built from data that regulatory affairs does not own: supplier qualification status, site capacity, raw material sourcing. Being able to sit in those conversations and translate the findings into a regulatory filing strategy is the core of the job.
- Comfort with risk assessment frameworks. FDA's guidance leans on structured risk assessment methodology. Professionals who can build or contribute to a formal risk register, rather than just narrative risk descriptions, are more useful to these teams.
- International awareness. Shortage mitigation increasingly involves temporary importation of foreign-market product, so familiarity with how EMA, Health Canada, or other authorities' approved formulations differ from the US-approved version is a real asset.
Who Is Hiring, and What the Roles Look Like
Generic drug manufacturers and sterile injectable makers have been the earliest and most consistent source of these roles, since injectables and generic sterile products have made up a disproportionate share of FDA's published shortage list for years. Large-molecule and hospital-administered product manufacturers are not far behind. CDMOs that manufacture on behalf of multiple sponsors are also building out resilience-focused regulatory roles, both because their clients are asking for it contractually and because a shortage at a CDMO site affects several sponsors' products at once.
Titles vary and the field has not settled on standard nomenclature yet. You will see "CMC regulatory affairs, supply continuity," "regulatory affairs manager, product resilience," and simply "senior CMC regulatory affairs specialist" with shortage prevention listed as a core responsibility rather than a standalone title. If you are searching for these roles, reading the responsibilities section of a CMC posting matters more than the title itself.
How to Position Yourself for This Work
If you already work in CMC regulatory affairs, the most direct path in is to get explicit about redundancy and post-approval change work on your resume: describe the site transfers, supplier qualifications, or CBE-30 filings you have led, and frame them in terms of how quickly they reduced single-source risk. If you are earlier in your career, volunteering to support a risk management plan or redundancy assessment, even as a secondary responsibility, gives you a concrete talking point that differentiates you from candidates who have only worked routine submissions.
It is also worth reading FDA's public guidance directly rather than relying on secondhand summaries. The agency has published draft and final guidance on risk management plans for drug shortage prevention, and being able to speak specifically to what the guidance requires, in an interview, signals real familiarity rather than surface-level awareness of the topic.
Conclusion
Drug shortage prevention was, for a long time, treated as someone else's problem inside most regulatory affairs organizations. FDORA's resilience and redundancy requirements have made that position untenable for companies with products on or near FDA's critical drug lists, and the result is a steady, if unevenly labeled, expansion of regulatory affairs work into supply chain risk. For professionals who already have CMC and post-approval change experience, this is one of the more durable hiring niches to build toward: the underlying statutory requirement is not going away, and the skill set it rewards, translating supply chain risk into regulatory pathway and timeline, is not easily automated or outsourced.