Senior IT Auditor

Responsibilities:
- Plan, execute, and report on operational IT audits, evaluating risks and controls across applications, infrastructure, cloud, data management, SDLC, change management, and IT operations (per IIA standards).
- Perform IT SOX control walkthroughs and testing; prepare related documentation.
- Assess cybersecurity controls, including identity and access management, vulnerability management, logging/monitoring, incident response, and security governance.
- Review controls for cloud (AWS/Azure), SaaS, data lakes, and analytics environments, including shared responsibility models.
- Design and execute data analytics-driven audit procedures using tools such as Dataiku (or equivalent).
- Apply automation, continuous auditing, and responsible AI use to improve audit efficiency and coverage, including assessing AI-enabled processes and controls.
- Manage timely completion of audit tasks; communicate status to auditees and audit leadership.
- Identify/document/communicate control deficiencies, root causes, technology risks, and improvement opportunities with actionable recommendations.
- Present audit results and prepare clear, professional audit reports and executive-level presentations.

Qualifications:
- Bachelor’s degree.
- 3–4 years of progressive experience in IT audit, information security, or technology risk.

Preferred Qualifications/Skills:
- CISA, CISM and/or CISSP.
- Experience auditing infrastructure, cybersecurity risks/controls, and operating systems.
- Pharmaceutical/life sciences or other regulated industry experience.
- Big 4/public accounting experience.
- Advanced IT infrastructure/applications/cybersecurity knowledge; strong analytical and problem-solving skills.
- Knowledge of SOX, COSO, COBIT, NIST, GxP, GDPR, and related frameworks.
- Data analytics tools (e.g., Dataiku, Alteryx).
- Understanding of AI concepts, risks (model governance, data quality, access, ethical use), and internal controls for AI-enabled processes.

Application Instructions:
- Apply now.