Sr. IT Corporate Audit Manager

Senior IT Audit Manager

Neurocrine Biosciences is seeking a Senior IT Audit Manager to serve as a senior individual contributor and functional-area expert in technology risk and IT audit within Corporate Audit Services. This role leads complex, cross-functional audit and advisory engagements across cybersecurity, data privacy, artificial intelligence (AI), cloud computing, third-party risk, and other technology domains while driving continuous improvement in audit methodologies, tools, and practices.

The position partners with senior business and technology leaders to translate complex technical risks into actionable business insights, influence risk-informed decision-making, and strengthen the Company's overall governance and control environment.

Given the broad remit of the Corporate Audit Services function, the responsibility will also include leading engagements across compliance, financial, operational, and other areas. As a senior individual contributor, the position provides functional leadership by mentoring colleagues, leading engagement teams, and advancing technology risk capabilities across the audit function while remaining actively involved in the execution of complex, high-impact engagements.

• Lead and execute audit and advisory engagements end-to-end, covering IT general controls, automated application controls, cybersecurity, cloud, AI and other technology areas. Drive scoping, testing, issue development, reporting, and remediation follow up in alignment with applicable internal audit standards and Company procedures
• Lead and provide functional oversight to engagement teams to ensure high-quality execution, timely delivery, and alignment with applicable internal audit standards and Neurocrine procedures. Set clear engagement expectations, provide timely feedback, and coach team members to strengthen capabilities, quality, and accountability. Teams may be internal, co-sourced, or hybrid. The role requires flexibility to operate at both a strategic engagement leadership and hands-on execution level
• Develop clear, concise, and actionable audit and advisory observations and reports. Analyze root causes and business impact, recommend right-sized remediation, and influence agreement in sensitive or complex situations
• Build strong relationships with technology and business leaders. Translate technical risks into clear business terms and communicate insights, results, and recommendations to management and audit leadership
• Monitor and validate remediation of audit action items. Identify trends, escalate overdue or high-risk matters, and support management and Audit Committee reporting
• Serve as a functional-area expert in technology risk for Corporate Audit Services. Advise colleagues, integrate technology risks into broader audits, and develop tools, practical guidance, and training that strengthen audit quality and team capabilities
• Lead the advancement and adoption of data analytics, automated testing, continuous monitoring, and responsible AI-enabled audit methods across Corporate Audit Services. Use technology to improve risk coverage, efficiency, and insight
• Provide technology-risk expertise and substantive input to enterprise risk assessment and annual audit planning. Evaluate changes in technology strategy, cyber threats, regulatory expectations, business initiatives, incidents, and third-party dependencies
• Anticipate and monitor business, regulatory, technology, and emerging risk trends and incorporate relevant insights into audit planning and stakeholder discussions

• Bachelor's degree in Information Systems, Computer Science, Cybersecurity, Accounting, Finance, Business, or related field and 8+ years of progressive experience in IT audit, internal audit focusing on technology risk and cybersecurity, public accounting, or consulting OR
• Master's degree with 6+ years of relevant experience
• Experience in a public company or public company audit environment required; experience in biopharma or another highly regulated industry strongly preferred;
  Big 4 and international experience are pluses
• 3+ years of experience leading complex engagements and coaching or mentoring teams, including direct reports and co-source partners
• CISA or equivalent certification strongly preferred. Additional certifications such as CISSP, CISM, CRISC, CIA, CPA, or relevant cloud and security credentials are pluses
• Strong understanding of applicable internal audit standards and technology control frameworks. Familiarity with frameworks such as COBIT, NIST, ISO 27001, COSO, and relevant privacy and regulatory requirements is expected
• Strong working knowledge of technology risk domains, including cybersecurity, cloud, identity and access management, IT general controls, automated application controls, systems development and implementation, technology resiliency and disaster recovery, data governance and privacy, third-party risk, AI governance, and enterprise systems
• Proven…