Senior IT Auditor
Regeneron
August 08, 2026
On-site
Sleepy Hollow, NY
IT
Responsibilities:
- Plan, execute, and report on operational IT audits, evaluating risks and controls across application, infrastructure, cloud, data management, SDLC, change management, and IT operations (per IIA standards and department methodologies).
- Perform IT SOX control walkthroughs/testing and prepare related documentation.
- Assess cybersecurity control effectiveness, including identity & access management, vulnerability management, logging/monitoring, incident response, and security governance.
- Review controls for cloud computing (e.g., AWS, Azure), SaaS platforms, data lakes, and analytics environments, including shared responsibility models.
- Design and execute data analytics-driven audit procedures using tools such as Dataiku or equivalent.
- Apply automation, continuous auditing, and responsible use of AI to improve audit efficiency/coverage, including assessing AI-enabled processes and controls.
- Manage timely completion of audit tasks; communicate status to auditees and the Manager/Director.
- Identify, document, and communicate control deficiencies, root causes, technology risks, and improvement opportunities with actionable recommendations.
- Present audit results and recommendations; prepare audit reports and executive-level presentations.
Qualifications:
- Bachelor’s degree.
- 3–4 years progressive experience in IT audit, information security, or technology risk.
Preferred:
- CISA, CISM and/or CISSP.
- Experience auditing/assessing infrastructure, cybersecurity risks/controls, and operating systems.
- Pharmaceutical/life sciences or other regulated industry experience.
- Big 4 or public accounting experience.
Skills:
- Advanced knowledge of IT infrastructure, applications, cybersecurity, and automated controls.
- Strong understanding of SOX, COSO, COBIT, NIST, GxP, GDPR, and other governance frameworks.
- Strong analytical/problem-solving skills; able to independently assess risk and propose solutions.
- Data analytics tools experience (e.g., Dataiku, Alteryx).
- Understanding of AI concepts and risks (e.g., model governance, data quality, access, ethical use) and related controls.
Application instructions:
- Apply now.
- Plan, execute, and report on operational IT audits, evaluating risks and controls across application, infrastructure, cloud, data management, SDLC, change management, and IT operations (per IIA standards and department methodologies).
- Perform IT SOX control walkthroughs/testing and prepare related documentation.
- Assess cybersecurity control effectiveness, including identity & access management, vulnerability management, logging/monitoring, incident response, and security governance.
- Review controls for cloud computing (e.g., AWS, Azure), SaaS platforms, data lakes, and analytics environments, including shared responsibility models.
- Design and execute data analytics-driven audit procedures using tools such as Dataiku or equivalent.
- Apply automation, continuous auditing, and responsible use of AI to improve audit efficiency/coverage, including assessing AI-enabled processes and controls.
- Manage timely completion of audit tasks; communicate status to auditees and the Manager/Director.
- Identify, document, and communicate control deficiencies, root causes, technology risks, and improvement opportunities with actionable recommendations.
- Present audit results and recommendations; prepare audit reports and executive-level presentations.
Qualifications:
- Bachelor’s degree.
- 3–4 years progressive experience in IT audit, information security, or technology risk.
Preferred:
- CISA, CISM and/or CISSP.
- Experience auditing/assessing infrastructure, cybersecurity risks/controls, and operating systems.
- Pharmaceutical/life sciences or other regulated industry experience.
- Big 4 or public accounting experience.
Skills:
- Advanced knowledge of IT infrastructure, applications, cybersecurity, and automated controls.
- Strong understanding of SOX, COSO, COBIT, NIST, GxP, GDPR, and other governance frameworks.
- Strong analytical/problem-solving skills; able to independently assess risk and propose solutions.
- Data analytics tools experience (e.g., Dataiku, Alteryx).
- Understanding of AI concepts and risks (e.g., model governance, data quality, access, ethical use) and related controls.
Application instructions:
- Apply now.