Associate Manager, IT SOX & Audits

About This Role

The Associate Manager, IT SOX & Audits will be responsible for managing and executing the Company’s IT General Controls (ITGC) testing program in support of SOX compliance, on behalf of management. This role serves as a key liaison between IT, IT Risk Management, the SOX Program Management Office (PMO), Internal Audit, and External Audit, ensuring a well‑coordinated, high‑quality, and surprise‑free SOX execution.

In addition to hands‑on testing, this role will manage and review ITGC testing performed by Co‑Ops or other junior resources, oversee evidence quality, and track remediation through completion. Outside of peak SOX testing cycles, the Associate Manager will support IT audits, risk assessments, and other Internal Audit departmental initiatives.

• Lead the end‑to‑end execution of ITGC SOX testing, including planning, walkthroughs, test of design, and test of operating effectiveness across:
  Logical Access (user provisioning, privileged access, periodic access reviews) Change Management IT Operations (e.g., job scheduling, backups, incident management)
• Execute ITGC testing on behalf of management, ensuring alignment with SOX 404 requirements and external audit expectations.
• Review and validate ITGC documentation, evidence, and testing conclusions to ensure accuracy, completeness, and audit‑ready quality.
• Proactively identify control deficiencies, assess impact, and support management in root cause analysis and remediation planning.

Act as a primary point of contact for ITGC‑related interactions with: IT Risk Management SOX PMO External Auditors Coordinate walkthroughs, testing schedules, and evidence requests to ensure streamlined communication and minimal disruption to IT teams. Ensure no surprises by escalating risks, control issues, or execution challenges early and clearly.

Manage, coach, and review work performed by Co‑Ops or junior staff supporting ITGC testing. Provide clear guidance on testing approach, documentation standards, and evidence expectations. Ensure consistent application of testing methodologies and adherence to SOX timelines.

Identify opportunities to improve efficiency, consistency, and quality within the ITGC SOX testing process. Support updates to ITGC scoping, risk assessments, and testing approaches in response to system changes or emerging risks. Maintain awareness of evolving SOX and ITGC expectations and incorporate leading practices into execution.

During non‑peak SOX periods, support: IT audits and integrated audits Targeted risk assessments or advisory reviews Internal Audit departmental initiatives as needed.

You are a hands‑on IT SOX professional who understands how to execute ITGC testing rigorously while maintaining strong, collaborative relationships across IT, Finance, and Audit stakeholders. You are detail‑oriented, highly organized, and comfortable operating in a fast‑paced SOX environment with competing deadlines.

• 3-5 years of experience in IT audit, IT SOX compliance, or IT risk advisory
• Strong working knowledge of IT General Controls (ITGC) and SOX 404 requirements
• Experience planning, executing, and reviewing ITGC testing
• Proven ability to manage relationships with External Auditors and cross‑functional stakeholders
• Ability to oversee and review work performed by junior resources
• Strong written and verbal communication skills, including interaction with senior IT and Finance leadership
• Bachelor’s degree in Information Systems, Computer Science, Accounting, or a related field

• Consulting, Big Four experience preferred.
• Life Sciences industry experience
• Professional…