Associate Manager, IT SOX, Audits

• Lead end-to-end execution of ITGC SOX testing, including planning, walkthroughs, test of design, and test of operating effectiveness
• Test controls across Logical Access, Change Management, and IT Operations
• Execute ITGC testing on behalf of management in alignment with SOX 404 requirements and external audit expectations
• Review and validate ITGC documentation, evidence, and testing conclusions
• Identify control deficiencies, assess impact, and support root cause analysis and remediation planning
• Serve as primary point of contact for ITGC-related interactions with IT Risk Management, SOX PMO, and External Auditors
• Coordinate walkthroughs, testing schedules, and evidence requests
• Escalate risks, control issues, and execution challenges
• Manage, coach, and review work performed by Co-Ops or junior staff
• Provide guidance on testing approach, documentation standards, and evidence expectations
• Ensure consistent testing methodologies and adherence to SOX timelines
• Identify process improvements within ITGC SOX testing
• Support ITGC scoping, risk assessments, and testing approaches in response to system changes or emerging risks
• Maintain awareness of evolving SOX and ITGC expectations and incorporate leading practices
• During non-peak SOX periods, support IT audits, integrated audits, targeted risk assessments, advisory reviews, and Internal Audit initiatives

• 3-5 years of experience in IT audit, IT SOX compliance, or IT risk advisory
• Strong working knowledge of IT General Controls (ITGC) and SOX 404 requirements
• Experience planning, executing, and reviewing ITGC testing
• Proven ability to manage relationships with External Auditors and cross-functional stakeholders
• Ability to oversee and review work performed by junior resources
• Strong written and verbal communication skills, including interaction with senior IT and Finance leadership
• Bachelor’s degree in Information Systems, Computer Science, Accounting, or a related field
• Consulting, Big Four experience preferred
• Life Sciences industry experience preferred
• Professional certifications preferred – CISA, CISM, CISSP, CRISC, CIA
• E-Verify Employer in the United States

Demonstrates expertise in IT General Controls (ITGC) and SOX 404 compliance, with a strong focus on testing methodologies, risk assessments, and stakeholder management. Proven ability to lead IT audit initiatives and mentor junior staff while ensuring adherence to regulatory standards.

• IT General Controls (ITGC)
• SOX 404 Compliance
• IT Audit Experience
• CISA Certification
• Stakeholder Management

• ITGC Testing
• Risk Assessment
• Control Deficiency Identification
• Documentation Review
• Testing Methodologies
• Root Cause Analysis
• Evidence Validation
• Change Management
• Logical Access Testing
• IT Operations Testing

• Strong Communication Skills
• Relationship Management
• Coaching and Mentoring

• CISA
• CISM
• CISSP
• CRISC
• CIA

• IT Risk Advisory
• Life Sciences Industry
• Big Four Experience
• External Audit
• SOX PMO