Senior IT Auditor

Start free →

Or apply yourself on the official page →

About the role

The Senior IT Auditor is responsible for c ontributing towards planning, executing, and reporting on operational IT audits, evaluating risks and controls, including application, infrastructure, cloud, data management, SDLC, change management, and IT operations, in accordance with IIA standards and department methodologies.   Perform IT SOX control walkthroughs and testing, along with preparing the related documentation.  Assess the effectiveness of cybersecurity controls, including identity and access management, vulnerability management, logging and monitoring, incident response, and security governance.     In this role, a typical day might include the following:   • Review   controls related to   cloud computing (e.g., AWS, Azure), SaaS platforms, data lakes, and analytics environments,   including shared responsibility models.   • Design and execute   data   analytics ‑ driven   audit procedures using tools such as Dataiku or equivalent,   to   identify   anomalies, trends, and control gaps.   • Apply automation, continuous auditing techniques, and responsible use of AI, where   appropriate , to improve audit efficiency, coverage, and insight, including assessing AI‑enabled business processes and controls.   • Manage   timely   completion of audit   tasks, including communication of status to the auditee and the   Manager/Director.   • Identify , document, and communicate control deficiencies,   root causes,   technology risks, and opportunities for improvement, providing practical, actionable recommendations aligned with business   objectives .   • Present the results of audit work to Internal Audit Manag ement   and   auditees , including practical recommendations to address identified risks and/or weaknesses in internal controls as well as opportunities to enhance operational efficiencies.   • Prepare clear, concise, and professional audit reports and executive‑level presentations for Internal Audit leadership, management, and key stakeholders.   This role might be for you if have experience with : • Advanced knowledge of   IT infrastructure, applications, cybersecurity, and automated controls     • Strong understanding of SOX, COSO, COBIT, NIST,   GxP , GDPR, and other relevant regulatory and governance frameworks.   • Strong analytical, critical‑thinking, and problem‑solving skills, with the ability to independently assess risk and propose solutions.   • Comfortable working and learning independently and as part of a team   • Excellent i nterpersonal, communication and writing skills, strong organizational abilities, and attention to detail are   required      • Experience wit h   data analytical tools ( e.g.   Dataiku, Alteryx,   etc. )   • Understanding of   AI concepts, associated risks (e.g., model governance, data quality, access, ethical use), and internal controls relevant to AI‑enabled processes.   To be considered for this role , you must have a Bachelor's degree with a minimum of 3   - 4   years   of progressive experience in IT audit, information security, or technology risk .   CISA, CISM and/or CISSP certifications/license preferred. Experience   auditing and evaluating   infrastructure,   cybersecurity risks/ controls   and auditing operating systems .   Pharmaceutical, life sciences, or other regulated industry experience   strongly   preferred.   Big 4 or public accounting experience preferred but not   required .   Does this sound like you? Apply now to take your first step towards living the Regeneron Way! We are committed to building a workplace with an inclusive culture. Regeneron is an equal opportunity employer and all  qualified applicants will receive consideration for employment without regard to race, color, religion or belief (or lack thereof), sex, sexual orientation, gender id

View the official posting →