Manager, IT Audit

About This Role As the Manager, IT Audit at Biogen, you will play a pivotal role in strengthening our technology risk management, cybersecurity posture, and control environment. This position transcends traditional IT audit execution by partnering with leaders across IT, Cyber, and the business to deliver risk-based, practical insights that support informed decision-making and continuous improvement. You will own audit engagements from planning through closure, ensuring audit quality, timeliness, and impactful outcomes.

As part of a high-performing Internal Audit team, your responsibilities include leading complex cybersecurity, cloud, SaaS, and integrated IT audits, , and helping shape the department's emerging technology agenda, including AI/GenAI risk coverage and data analytics automation. This role offers an opportunity for professionals seeking to deepen technical audit judgment, gain broad business exposure, and build a foundation for future growth within Internal Audit or the life sciences industry.

What You'll Do:
Lead end-to-end IT, cybersecurity, cloud, SaaS, third-party, and integrated audits from planning through reporting and follow-up, with accountability for scope, execution quality, and results. Apply a risk-based approach to identify key technology and cyber risks, evaluate control effectiveness, and adjust audit scope based on emerging issues and insights. Communicate audit results clearly and effectively, including presenting findings and practical remediation recommendations to senior IT, Cyber, and business leadership.

Develop high-quality audit reports that are concise, clear, and decision oriented. Build strong, trusted relationships with IT, Cyber, and business leaders while maintaining independence and objectivity. Coach and review work performed by audit team members, co-ops, and external providers, providing actionable feedback and supporting capability development. Contribute to the annual risk assessment and audit plan, with a focus on emerging technology risks including AI/GenAI, cloud, and third-party exposures.

Leverage data analytics and AI-enabled tools to enhance risk identification, audit coverage, and efficiency; help advance the department's audit automation agenda. Contribute to departmental strategic initiatives and continuous improvement objectives: including methodology, technology enablement, talent development, and Audit Committee reporting, with opportunities to lead select work streams. Drive continuous improvement in audit execution, tools, and ways of working within assigned engagements and portfolios.

Who You Are:
You are a critical thinker who can navigate ambiguity and articulate technology and cyber risk clearly and effectively. You are comfortable engaging with senior stakeholders, managing difficult conversations, and challenging constructively. Your curiosity, adaptability, and self-motivation drive you to continuously improve how audit delivers value. You possess a strong understanding of IT General Controls, cybersecurity fundamentals, and leading frameworks (NIST, COBIT, ISO 27001, OWASP), with working knowledge of cloud, SaaS, and third-party technology risk.

Required Skills:

5+ years of diversified internal and/or external IT audit, IT risk advisory, or cybersecurity audit experience (Big 4 experience preferred) Bachelor's degree in Information Systems, Computer Science, Cybersecurity, or a related field. Strong knowledge of IT audit methodology, IT General Controls, and cybersecurity control frameworks. Excellent communication and project management skills. Willingness to travel up to 10% for domestic and international assignments.

Preferred

Skills:

Life Sciences industry experience or relevant technology risk experience outside audit. Master's degree in a related field. Experience with cloud environments (AWS, Azure, GCP), cybersecurity toolsets (e.g., Crowd Strike, Zscaler, Palo Alto, Microsoft Defender, Splunk), AI/GenAI risk frameworks (e.g., NIST AI RMF), audit management platforms (e.g., Audit Board), Generative AI applications (e.g., Microsoft Copilot), and data analytics / visualization tools (e.g., Alteryx, Python, Microsoft Power BI, Tableau) a plus.

CISA, CISSP, or equivalent certification.

#LI-Hybrid Job Level: Management

Additional Information The base compensation range for this role is: $-$ Base salary offered is determined through an analytical approach utilizing a combination of factors including, but not limited to, relevant skills & experience,…