Director, Internal Audit

Axogen•Tampa, FL

2d•Onsite

About The Position

Axogen is seeking a Director, Internal Audit to establish and lead the company’s newly internalized Internal Audit function. This role reports directly to the Chairman of the Audit Committee of the Board of Directors and oversees SOX compliance, internal controls, IT-related audit activities, and operational audits. The Director will be responsible for designing, executing, and continuously improving the internal audit strategy, collaborating cross-functionally with various departments including Finance, IT, Operations, Legal, Quality Assurance, and other business units. This individual will act as Axogen’s internal controls subject-matter expert, maintaining an independent and objective assurance function to ensure a strong control environment aligned with regulatory expectations. Regular interaction with the Audit Committee and external auditors is expected, involving transparent reporting on risks, control effectiveness, audit findings, and remediation status. The ideal candidate will thrive in a fast-paced, public company environment subject to SOX, demonstrating strong judgment, executive communication skills, and the ability to operate with independence and influence.

Requirements

Bachelor’s degree in Accounting, Finance, or related field
CPA, CIA, or similar certification required (CIA preferred; CPA beneficial)
Minimum 10 years of progressive internal audit, SOX, or public accounting experience, including experience in a public company environment or Big 4/public accounting
Minimum 5 years of leadership experience
Strong knowledge of SOX requirements, COSO internal control framework, and audit methodologies
Experience in MedTech, Pharma, Biotech, or other regulated industries preferred
Prior involvement in system implementations is a plus
Excellent analytical, organizational, and communication skills, with the ability to convey complex information clearly
Ability to manage multiple priorities and meet deadlines in a fast-paced environment
Strong problem-solving mindset with demonstrated ability to identify root causes and recommend scalable improvements
Advanced proficiency in Microsoft Office; strong Excel skills required
Experience with audit or GRC tools preferred

Nice To Haves

CIA preferred
CPA beneficial
Prior involvement in system implementations is a plus
Experience with audit or GRC tools preferred

Responsibilities

Lead the development, execution, and ongoing enhancement of Axogen’s SOX program, including risk assessment, scoping, testing, documentation, and remediation tracking.
Manage the transition of internal audit activities from a third‑party outsourced model to a fully in‑house function, establishing processes, frameworks, and best‑practice methodologies.
Report functionally to the Chairman of the Audit Committee of the Board of Directors, maintaining independence from management in the execution of audit activities, risk assessments, and reporting of findings.
Prepare and deliver Internal Audit reports and presentations directly to the Audit Committee of the Board of Directors, including SOX status, significant audit findings, remediation progress, risk assessment results, and emerging enterprise risks.
Lead, mentor, and develop team members by fostering a culture of accountability, collaboration, and continuous growth; provide clear direction, set performance expectations, and support career development through coaching and feedback.
Develop and maintain a formal risk assessment framework, ensuring consistent evaluation of likelihood, impact, and control effectiveness.
Oversee the performance of the end‑to‑end SOX control testing over the design and operational effectiveness of internal controls, including business process and automated controls impacting financial reporting.
Oversee IT General Controls testing, including logical access, change management, segregation‑of‑duties compliance, and interface/job monitoring.
Perform fraud risk assessments and identify areas requiring enhanced monitoring, testing, or preventive controls.
Utilize analytics, data trends, and key risk indicators to augment risk assessment activities and improve audit planning.
Partner closely with Finance, IT, and Operations in the design of processes, controls, process inefficiencies, and risks requiring mitigation or enhanced monitoring.
Coordinate with external auditors regarding SOX reliance strategy, walkthroughs, testing schedules, and remediation plans.
Assess the design and operating effectiveness of key configuration and automated controls within key applications.
Validate the completeness and accuracy of system‑generated reports and data sets used in key financial and operational controls.
Coordinate annual SOC 1 report reviews for third‑party service providers, including evaluating complementary user entity controls and sub‑service organizations.
Track and validate remediation of control deficiencies and audit issues, partnering with business owners to implement sustainable solutions.
Prepare clear, concise audit reports summarizing findings, root causes, and recommended corrective actions.
Provide periodic reporting to senior leadership on audit results, trends, and opportunities for control enhancement.
Evaluate third‑party and outsourced service provider risks, including controls, data access, and continuity considerations.
Collaborate with IT Security on cybersecurity‑related risks that impact financial reporting or operational audit scope.
Support readiness efforts and future-state design relating to systems implementations and upgrades, including ERP, HRIS and manufacturing systems, to ensure effective control design and documentation.
Conduct operational, compliance, and process audits to assess risks, evaluate efficiency, and identify opportunities for improvement across the organization.
Build strong, collaborative relationships across the business, promoting a culture of accountability and continuous improvement.
Ensure compliance with company policies.
Perform other related duties as assigned.