Director, Internal Audit, IT and Digital

Director, Internal Audit What You’ll Do

• Lead Insmed’s technology SOX compliance program, including IT General Controls (ITGCs), IT Automated Controls (ITACs), interfaces, and key report testing in collaboration with IT.
• Develop and execute technology SOX strategy, risk assessment, testing approach, and annual compliance plan; coordinate activities with external auditors and co-sourced providers.
• Partner with IT and project stakeholders to evaluate impacts of system/application/infrastructure/process changes on the control environment.
• Execute technology-focused audits (cybersecurity, infrastructure, cloud, enterprise applications, digital platforms, data governance, emerging technologies) and oversee engagement phases per Internal Audit methodology and Global Internal Audit Standards.
• Assess technology governance/cybersecurity/risk management/internal controls and provide practical recommendations; support executive and Audit Committee reporting.
• Partner with Technology, Digital, Data, Information Security, and business leaders to identify, assess, and respond to technology risks; provide independent perspectives for AI governance, data governance, and digital transformation initiatives.
• Champion data analytics/automation/AI-enabled auditing to improve audit effectiveness and efficiency.

• Bachelor’s degree (Information Systems, Computer Science, Cybersecurity, Accounting, Business Administration, or related) + 12+ years progressive experience in IT audit/technology risk/cybersecurity/internal audit/advisory.
• Required:
  
  CISA.
• Demonstrated leadership in technology audits, IT SOX programs, and cybersecurity/technology risk management.
• Strong knowledge of ITGCs/ITACs, cybersecurity frameworks, cloud environments, and technology governance; experience in regulated environments.
• Ability to influence stakeholders; excellent communication/presentation.
• Experience managing external service providers/co-sourced audit relationships.

• CPA/CIA/CISSP/CRISC/CDPSE or similar; life sciences industry experience; familiarity with Oracle, Workday, Veeva, Service Now, Azure, AWS, and related technologies.

• Medical/dental/vision, mental health support, annual wellbeing reimbursement, EAP; paid time off; 401(k) match, equity awards, ESPP; company-paid life/disability insurance; learning and development programs.