BeOne Medicines · 1 day ago
Senior Manager, IT Audit
Cambridge, MA
Full-time
Onsite
Senior Level
$129K/yr - $174K/yr
7+ years expBeOne Medicines is a growing company focused on fighting cancer, and they are seeking an experienced Senior IT Audit Manager to join their internal audit function. This role involves leading assurance activities related to business, technology, and security, while collaborating with various stakeholders to achieve the company's objectives.
Pharmaceuticals
Responsibilities
Develop and maintain strategic partnerships to improve risk management and control processes
Engage in the risk assessment process by identifying and evaluating technology-related risks that could affect the achievement of business objectives, ensuring alignment with company goals
Implement and maintain risk management strategies for Internal Audit, monitor and report on risk status, ensure compliance with regulations, and collaborate with internal control teams to maintain a robust IT environment
Lead complex and/or global financial, compliance, and operational audits and advisory initiatives to assess process and control effectiveness, encompassing all audit cycle phases: planning, execution, issue escalation, documentation, reporting, and remediation follow-up
Develop risk-based, tailored audit programs across a wide variety of IT risks, including but not limited to areas such as Cybersecurity, System Implementations, Data Privacy, Active Directory, etc
Conduct on-site fieldwork to assess the Company’s information system and security related processes and controls. Ensure all audit program steps are completed, transactions are thoroughly evaluated, and work papers are properly documented for audit conclusions
Craft accurate, concise and compelling audit and advisory reports, and support or deliver presentations of findings and recommendations to internal and external management, including senior leadership
Coordinate with external auditor and management in leading the annual planning of Sarbanes-Oxley (SOX) 404/C-SOX compliance requirements
Collaborate with co-source and external auditors to support global Sarbanes-Oxley 404 compliance by assessing and testing ITGC and ITAC internal controls, ensuring adequate test work, documentation, and audit quality to drive more reliance
Coordinate and collaborate with business leaders, external auditors, and other control and monitoring disciplines (i.e., IT, Compliance and Legal) to facilitate audits and ensure effective and efficient coverage of Company-wide risks
Allocate resources for internal audits and manage third-party work to ensure timely and high-quality completion
Monitor audit projects proactively, addressing issues promptly to ensure smooth progress
Ensure all audit activities comply with internal audit standards and methodologies, maintaining rigor and professionalism
Support any additional assignments or special projects as required including but not limited to Quality Assurance and Improvement Program (QAIP), External/Internal Quality Assessment to enhance the effectiveness and efficiency of the Internal Audit function
Stay updated on industry trends and best practices in internal auditing and relevant subject matter expertise areas
Provide coaching and mentoring to team members on audit projects, ensuring they develop the necessary skills and knowledge to excel in their roles
Cultivate a collaborative and supportive team environment, promoting open communication, mutual respect, and a shared commitment to achieving audit objectives
Identify the developmental needs of team members and facilitate targeted training opportunities, foster continuous professional growth and enhance overall team performance
Qualification
Required
Bachelor's degree in computer science, Management Information Systems, Cybersecurity, or related field of study from an accredited university
7-12 years of progressive experience in performing and independently leading complex information technology and cybersecurity audits
Expert knowledge across all IT domains including cloud security, DevOps, secure software development, application security, databases, and operating systems
Expert knowledge of authentication, authorization, and credential management
Strong SOX/C-SOX ITGC and application control testing audit experience, and proficient in COSO, NIST CFS, ISO27001 etc. Standards
Strong verbal and written communication skills
Professional Certification, (e.g. CISA, CRISC, CISSP, IAPP, CISM,) required
Strong Microsoft Office skills (particularly Excel and PowerPoint)
Knowledge of various operating systems like Windows, Linux, and Unix
Understanding of database management systems such as SQL, Oracle, and NoSQL databases
Familiarity with network infrastructure, protocols, and security measures
Proficiency in audit software tools like AuditBoard, ACL, Tableau, PowerBI and other data analytics tool
Skilled users of SAP and Generative AI
Preferred
Big Four Experience Preferred
CIA preferred
Pharmaceutical industry experience and knowledge preferred
Benefits
Medical
Dental
Vision
401(k)
FSA/HSA
Life Insurance
Paid Time Off
Wellness
Company
BeOne Medicines
BeOne Medicines is a global oncology company domiciled in Switzerland that is discovering and developing innovative treatments that are more accessible to cancer patients worldwide.
10001+ employees
Funding
Current Stage
Late StageCompany data provided by crunchbase