Associate Manager, IT SOX & Audits

Biogen•Cambridge, MA

1d•Hybrid

About The Position

The Associate Manager, IT SOX & Audits will be responsible for managing and executing the Company’s IT General Controls (ITGC) testing program in support of SOX compliance, on behalf of management. This role serves as a key liaison between IT, IT Risk Management, the SOX Program Management Office (PMO), Internal Audit, and External Audit, ensuring a well‑coordinated, high‑quality, and surprise‑free SOX execution. In addition to hands‑on testing, this role will manage and review ITGC testing performed by Co‑Ops or other junior resources, oversee evidence quality, and track remediation through completion. Outside of peak SOX testing cycles, the Associate Manager will support IT audits, risk assessments, and other Internal Audit departmental initiatives.

Requirements

3-5 years of experience in IT audit, IT SOX compliance, or IT risk advisory
Strong working knowledge of IT General Controls (ITGC) and SOX 404 requirements
Experience planning, executing, and reviewing ITGC testing
Proven ability to manage relationships with External Auditors and cross‑functional stakeholders
Ability to oversee and review work performed by junior resources
Strong written and verbal communication skills, including interaction with senior IT and Finance leadership
Bachelor’s degree in Information Systems, Computer Science, Accounting, or a related field

Nice To Haves

Consulting, Big Four experience preferred.
Life Sciences industry experience
Professional certifications preferred – CISA, CISM, CISSP, CRISC, CIA.

Responsibilities

Lead the end‑to‑end execution of ITGC SOX testing, including planning, walkthroughs, test of design, and test of operating effectiveness across: Logical Access (user provisioning, privileged access, periodic access reviews), Change Management, IT Operations (e.g., job scheduling, backups, incident management)
Execute ITGC testing on behalf of management, ensuring alignment with SOX 404 requirements and external audit expectations.
Review and validate ITGC documentation, evidence, and testing conclusions to ensure accuracy, completeness, and audit‑ready quality.
Proactively identify control deficiencies, assess impact, and support management in root cause analysis and remediation planning.
Act as a primary point of contact for ITGC‑related interactions with: IT Risk Management, SOX PMO, External Auditors
Coordinate walkthroughs, testing schedules, and evidence requests to ensure streamlined communication and minimal disruption to IT teams.
Ensure no surprises by escalating risks, control issues, or execution challenges early and clearly.
Manage, coach, and review work performed by Co‑Ops or junior staff supporting ITGC testing.
Provide clear guidance on testing approach, documentation standards, and evidence expectations.
Ensure consistent application of testing methodologies and adherence to SOX timelines.
Identify opportunities to improve efficiency, consistency, and quality within the ITGC SOX testing process.
Support updates to ITGC scoping, risk assessments, and testing approaches in response to system changes or emerging risks.
Maintain awareness of evolving SOX and ITGC expectations and incorporate leading practices into execution.
During non‑peak SOX periods, support: IT audits and integrated audits, Targeted risk assessments or advisory reviews, Internal Audit departmental initiatives as needed

Benefits

Medical, Dental, Vision, & Life insurances
Fitness & Wellness programs including a fitness reimbursement
Short- and Long-Term Disability insurance
A minimum of 15 days of paid vacation and an additional end-of-year shutdown time off (Dec 26-Dec 31)
Up to 12 company paid holidays + 3 paid days off for Personal Significance
80 hours of sick time per calendar year
Paid Maternity and Parental Leave benefit
401(k) program participation with company matched contributions
Employee stock purchase plan
Tuition reimbursement of up to $10,000 per calendar year
Employee Resource Groups participation