Senior IT Internal Auditor

Bioventus•Durham, NC

42d

About The Position

The Senior IT Internal Auditor will be a key part of overseeing the execution of the SOX Compliance program, as well as the expansion of Internal Audit (IA) services beyond SOX compliance to include business, financial, and operational audits. This role will support internal audit and compliance efforts by evaluating and enhancing the effectiveness of IT risk management, internal controls, and governance processes. This individual collaborates with cross-functional teams to assess risks, test controls, and deliver insights that strengthen the company's IT control environment and ensure alignment with SOX 404 compliance requirements. Key responsibilities include planning and executing IT audits across key systems such as SAP and Workday, with a focus on application controls, general IT controls (ITGCs), segregation of duties (SOD), and automated workflows. The IT Senior Auditor helps maintain a robust and scalable control framework that supports regulatory compliance and business objectives. This position will work across cross-functional organizational business units primarily collaborating with management at all levels to facilitate the development of action plans to address risks identified during audits. This role will also be empowered to contribute meaningfully to the audit strategy and risk posture of Bioventus, working closely with stakeholders to drive continuous improvement and uphold the company's commitment to innovation, integrity, and improved patient outcomes.

Requirements

Bachelor's degree in information technology, MIS, Accounting, Business, or related field; master's degree preferred.
3 years of IT Audit experience (internal/external) or equivalent business experience
Relevant professional certifications preferred (CPA, CISA, CIA, CISSP, CISM)
Understanding and knowledge of IT risk management and cybersecurity risk management standards (COBIT, NIST CSF, etc.)
Experience in assessing the design and operating effectiveness of IT risk management and IT controls, (IT general controls, application controls, etc.) for Internal Audit, SOX compliance, or other risk management activities
Experience assessing configuration and controls of SAP S/4 HANA (BASIS and security administration, process controls, etc.) is a plus
Strong understanding of IT general controls, and current focus areas of external financial statement auditors
Demonstrated experience working cross-functionally.
Experience in public accounting; experience as a public accounting senior is a plus.
Solid analytical skills with the ability to quickly assess business processes and solve complex problems.
Excellent interpersonal and communication skills both written and verbal.
Committed to quality, willingness to challenge current practice and innovate, continuous improvement mindset.
Ability to manage multiple tasks concurrently with minimal supervision; ability to adapt to changing priorities.
Highly regarded for integrity, ethics, flexibility, teamwork, professional excellence, and interpersonal skills
Experience in the healthcare industry is a plus.

Responsibilities

Lead or support audit teams during technology, operational, and / or Sarbanes-Oxley (SOX) audits from beginning to end of the audit engagement. This includes assisting the project manager with audit planning, scoping, and execution of the audit.
Assist with the expansion of IT Internal Audit services beyond SOX compliance including IT and operational audits.
Observe, understand, and document detailed IT process narratives and/or process flow charts, including the identification of IT process risks and key controls.
Plan assigned audits, including the development of the scope, allocation of resources, coordination with client management, completion of a comprehensive risk assessment and the development of appropriate audit test steps to ensure audits deliver valuable insights to management and are delivered within established timelines and quality standards.
Execute audit test steps and documents related workpapers to support conclusions reached.
Draft observation logs and audit reports summarizing conclusions.
Proactively interact with management and stakeholders to gather information, resolve problems, and make recommendations for business and process improvement; develop business partner relationships.
Balance the dual roles of independent, objective assurance provider and consultative business partners.
Perform follow-up on key management actions from prior audit reports to determine if required action was taken, document, and communicate the results to audit and client management.
Develop and present communications, frequently to senior leadership, communicating the desired message, at the appropriate level, for the right recipient.
Maintain awareness of internal audit and internal control audit trends to assure audit processes remain effective.
Drive innovation across the team using a deep understanding of audit practices.
Holds oneself and others accountable to conduct business in a manner compliant with Bioventus' Code of Compliance and Ethics, policies and procedures and internal controls applicable to their role.
Other duties as assigned.