Manager, IT - Global Internal Audit & Assurance

Bristol Myers Squibb • Princeton, NJ

10d

About The Position

The Manager, IT - Global Internal Audit & Assurance works collaboratively with audit teams to execute IT and integrated audits. The role plans audits, identifies significant risks, develops risk-based procedures, and manages assigned audit activities to ensure high-quality work within deadlines. It collects and analyzes data, evaluates evidence, and reaches logical conclusions, while using data analytics to support audit findings and business requests and contributing to analytics development and enhancement projects.

The role assesses business processes and control environments through interviews with key personnel, identifies value-added recommendations, and communicates audit status and significant issues to management. It prepares audit documentation and reports in accordance with Bristol Myers Squibb and Institute of Internal Auditors standards. The manager also participates in departmental projects, communicates candidly with affiliates, exercises professional skepticism, and coaches team members where appropriate. Other duties may be assigned.

A bachelor's degree in a relevant discipline and 4–6 years of prior audit experience, including IT or operational auditing, IT, risk management, and/or compliance, are required. The position requires knowledge of IT frameworks and standards, IT General Controls, the System Development Lifecycle, and IIA standards, along with strong communication, analytical, and computer skills. Experience auditing AI, cybersecurity, data privacy, and system implementations is strongly preferred. The listed compensation range for Princeton, New Jersey is $105,400–$127,720. The position offers comprehensive benefits, subject to eligibility and plan terms.

Requirements

• Bachelor's degree in Information Sciences, Computer Sciences, Data Sciences, Accounting, Finance, or another business discipline.
• 4–6 years of prior audit experience, including experience in IT or operational auditing, IT, risk management, and/or compliance.
• Knowledge of IT frameworks and standards such as COBIT, NIST, ISO 27001, or GTAG; IT General Controls; the System Development Lifecycle; and IIA standards.
• English fluency and strong verbal and written communication skills, including experience developing written reports and delivering presentations.
• Analytical and computer skills, including proficiency with MS Teams, Excel, Word, PowerPoint, and OneNote.
• AI and data analytics experience, specifically with visualization tools such as Tableau, Alteryx, and Power BI.

Nice To Haves

• MBA or another advanced degree.
• Professional certification such as CISA, CIA, CISSP, or equivalent.
• Experience auditing AI, cybersecurity, data privacy, and system implementations.
• Experience with Internal Audit and/or Big Four or other consulting firms.

Responsibilities

• Collaborate with audit teams to execute IT and integrated audits.
• Plan audits by identifying significant risks and developing appropriate risk-based audit procedures.
• Research applicable policies, guidance, and regulations, and manage day-to-day audit activities to complete assigned sections with high quality and within deadlines.
• Collect and analyze audit data, evaluate information, and draw logical conclusions.
• Design and execute standalone data analytics to support audit findings and business requests.
• Use existing data analytics and assist with analytics build and enhancement projects when assigned.
• Interview key personnel to assess business processes and the strength of control environments.
• Identify value-added recommendations to improve the adequacy, effectiveness, and efficiency of controls and related processes.
• Lead meetings with management to communicate audit status and align on significant issues and corrective actions.
• Prepare detailed audit documentation evidencing testing results in accordance with BMS and IIA standards.
• Prepare audit reports with clear, concise observations and corrective actions for key stakeholders.
• Participate in departmental projects, such as audit lessons learned, training, and continuous improvement.
• Communicate clearly and candidly with affiliates and demonstrate executive presence in meetings.
• Listen actively to affiliates while exercising professional skepticism.
• Coach team members by providing specifics and suggested action plans where appropriate.
• Perform other duties and responsibilities as assigned.

Benefits

• Wellbeing support, retirement and financial protection benefits, and insurance offerings, including medical, dental, vision, life, and disability coverage, subject to eligibility and plan terms.
• Flexible Time Off for eligible U.S.-based exempt employees, subject to manager approval.
• 11 paid company holidays each year.
• For eligible non-exempt employees, RayzeBio employees, and employees located in Puerto Rico: 160 hours of paid vacation annually for new hires, subject to manager approval, 11 paid company holidays, and 3 optional holidays.
• Depending on eligibility, paid sick leave, up to two paid volunteer days per year, summer hours flexibility, and leaves of absence for medical, personal, parental, caregiver, bereavement, or military needs.
• Eligible employees may receive an annual Global Shutdown between Christmas Day and New Year's Day.
• Eligible employees may be eligible for discretionary incentive cash and stock opportunities.

What This Job Offers

• Job Type: Full-time
• Career Level: Manager