Senior IT Audit Manager

RepliGen Corporation•Waltham, MA

2d•$130,000 - $175,000•Remote

About The Position

This role will strengthen the company's control environment, reduce compliance and operational risk, and ensure timely execution of remediation efforts while enabling strategic technology investments to be implemented with appropriate governance. As the organization grows toward its long-term revenue objectives, this position provides critical capacity to support scalable, sustainable, and audit-ready IT operations. Own and lead the ITGC and IT internal audit program, including planning, coordination, execution support, documentation quality, issue management, and executive-level status reporting. Serve as a senior advisor to IT and business control owners on SOX ITGCs, automated controls, key reports, IT-dependent controls, governance expectations, and sustainable control design. Collaborate with ITGC Manager to manage end-to-end audit lifecycle activities with external auditors and internal stakeholders, including walkthroughs, evidence readiness, testing coordination, deficiency evaluation, and timely issue resolution. Lead the assessment of IT control risks across enterprise applications, infrastructure, cybersecurity, access management, change management, operations, and emerging technology initiatives. Oversee remediation of IT-related audit findings and corrective actions, ensuring action plans address root cause, are appropriately documented, and are validated for operating effectiveness. Partner with IT leadership, project teams, and process owners to embed control requirements into new system implementations, enhancements, SDLC activities, and process transformation initiatives. Develop and maintain scalable IT compliance processes, templates, metrics, dashboards, and governance routines to improve program maturity, efficiency, consistency, and accountability. Partner with ITGC Manager on continuous improvement efforts to reduce audit friction, strengthen evidence quality, improve control owner readiness, and enhance the overall IT risk and compliance operating model. Manage internal corrective actions assigned to IT, coordinating with SME’s to identify and push forward remediation plans. Provide coaching, direction, and quality review for team members, consultants, or control owners supporting ITGC, SOX, and internal audit activities.

Requirements

Bachelor’s degree in Information Systems, Accounting, Finance, Computer Science, or a related field.
Minimum of 8 years of progressive experience in external audit, internal audit, IT compliance, IT risk management, or SOX advisory, with significant focus on IT General Controls and enterprise application controls.
Demonstrated experience leading audit programs, managing cross-functional stakeholders, and presenting risk and compliance matters to senior leaders.
Strong understanding of ITGC domains including access management, change management, computer operations, interface controls, automated controls, key reports, and SDLC governance.
Excellent written and verbal communication skills, with the ability to translate complex IT risk and control topics into clear, actionable guidance for business and technology leaders.

Nice To Haves

Experience supporting enterprise environments such as SAP, Workday, ServiceNow, and related business applications preferred.
People leadership, indirect leadership, or consultant management experience preferred; ability to coach control owners and influence without authority required.
Experience supporting environments such as SAP, Workday, ServiceNow preferred.

Responsibilities

Own and lead the ITGC and IT internal audit program, including planning, coordination, execution support, documentation quality, issue management, and executive-level status reporting.
Serve as a senior advisor to IT and business control owners on SOX ITGCs, automated controls, key reports, IT-dependent controls, governance expectations, and sustainable control design.
Collaborate with ITGC Manager to manage end-to-end audit lifecycle activities with external auditors and internal stakeholders, including walkthroughs, evidence readiness, testing coordination, deficiency evaluation, and timely issue resolution.
Lead the assessment of IT control risks across enterprise applications, infrastructure, cybersecurity, access management, change management, operations, and emerging technology initiatives.
Oversee remediation of IT-related audit findings and corrective actions, ensuring action plans address root cause, are appropriately documented, and are validated for operating effectiveness.
Partner with IT leadership, project teams, and process owners to embed control requirements into new system implementations, enhancements, SDLC activities, and process transformation initiatives.
Develop and maintain scalable IT compliance processes, templates, metrics, dashboards, and governance routines to improve program maturity, efficiency, consistency, and accountability.
Partner with ITGC Manager on continuous improvement efforts to reduce audit friction, strengthen evidence quality, improve control owner readiness, and enhance the overall IT risk and compliance operating model.
Manage internal corrective actions assigned to IT, coordinating with SME’s to identify and push forward remediation plans.
Provide coaching, direction, and quality review for team members, consultants, or control owners supporting ITGC, SOX, and internal audit activities.