IRIS works on a system of affiliation to organisations, which is not linked to any contractual relationship of IRIS users with any particular organisation. Affiliation is under the control of the organisations, each of which has to nominate an initial "Admin User", in charge of allowing future affiliations. In this particular case, you can be added to the submission as a contributor or manager for that submission if you are also affiliated to the CRO in question, with an IRIS role, in addition to the company where you already have an IRIS affiliation and role.