Want to know if this job is worth applying to?
Cambridge, Massachusetts, United States
Hybrid
About This Role
The Associate Manager, IT SOX & Audits will be responsible for managing and executing the Company’s IT General Controls (ITGC) testing program in support of SOX compliance, on behalf of management. This role serves as a key liaison between IT, IT Risk Management, the SOX Program Management Office (PMO), Internal Audit, and External Audit, ensuring a well‑coordinated, high‑quality, and surprise‑free SOX execution.
In addition to hands‑on testing, this role will manage and review ITGC testing performed by Co‑Ops or other junior resources, oversee evidence quality, and track remediation through completion. Outside of peak SOX testing cycles, the Associate Manager will support IT audits, risk assessments, and other Internal Audit departmental initiatives.
What You’ll Do
Lead the end‑to‑end execution of ITGC SOX testing, including planning, walkthroughs, test of design, and test of operating effectiveness across:
Logical Access (user provisioning, privileged access, periodic access reviews)
Change Management
IT Operations (e.g., job scheduling, backups, incident management)
Execute ITGC testing on behalf of management, ensuring alignment with SOX 404 requirements and external audit expectations.
Review and validate ITGC documentation, evidence, and testing conclusions to ensure accuracy, completeness, and audit‑ready quality.
Proactively identify control deficiencies, assess impact, and support management in root cause analysis and remediation planning.
Stakeholder & Auditor Management
Act as a primary point of contact for ITGC‑related interactions with:
IT Risk Management
SOX PMO
External Auditors
Coordinate walkthroughs, testing schedules, and evidence requests to ensure streamlined communication and minimal disruption to IT teams.
Ensure no surprises by escalating risks, control issues, or execution challenges early and clearly.
Team Oversight & Quality Assurance
Manage, coach, and review work performed by Co‑Ops or junior staff supporting ITGC testing.
Provide clear guidance on testing approach, documentation standards, and evidence expectations.
Ensure consistent application of testing methodologies and adherence to SOX timelines.
Continuous Improvement & Readiness
Identify opportunities to improve efficiency, consistency, and quality within the ITGC SOX testing process.
Support updates to ITGC scoping, risk assessments, and testing approaches in response to system changes or emerging risks.
Maintain awareness of evolving SOX and ITGC expectations and incorporate leading practices into execution.
Non‑SOX Period Support
During non‑peak SOX periods, support:
IT audits and integrated audits
Targeted risk assessments or advisory reviews
Internal Audit departmental initiatives as needed
Who You Are
You are a hands‑on IT SOX professional who understands how to execute ITGC testing rigorously while maintaining strong, collaborative relationships across IT, Finance, and Audit stakeholders. You are detail‑oriented, highly organized, and comfortable operating in a fast‑paced SOX environment with competing deadlines.
Required Skills
3-5 years of experience in IT audit, IT SOX compliance, or IT risk advisory
Strong working knowledge of IT General Controls (ITGC) and SOX 404 requirements
Experience planning, executing, and reviewing ITGC testing
Proven ability to manage relationships with External Auditors and cross‑functional stakeholders
Ability to oversee and review work performed by junior resources
Strong written and verbal communication skills, including interaction with senior IT and Finance leadership
Bachelor’s degree in Information Systems, Computer Science, Accounting, or a related field
Preferred Skills
Consulting, Big Four experience preferred. Life Sciences industry experience
Professional certifications preferred – CISA, CISM, CISSP, CRISC, CIA.
#LI-Hybrid
Additional Information
Base salary offered is determined through an analytical approach utilizing a combination of factors including, but not limited to, relevant skills & experience, job location, and internal equity.
Regular employees are eligible to receive both short term and long-term incentives, including cash bonus and equity incentive opportunities, designed to reward recent achievements and recognize your future potential based on individual, business unit and company performance.
In addition to compensation, Biogen offers a full and highly competitive range of benefits designed to support our employees’ and their families physical, financial, emotional, and social well-being; including, but not limited to:
Why Biogen?
We are a global team with a commitment to excellence, and a pioneering spirit. As a mid-sized biotechnology company, we provide the stability and resources of a well-established business while fostering an environment where individual contributions make a significant impact. Our team encompasses some of the most talented and passionate achievers who have unparalleled opportunities for learning, growth, and expanding their skills. Above all, we work together to deliver life-changing medicines, with every role playing a vital part in our mission. Caring Deeply. Achieving Excellence. Changing Lives.
At Biogen, we are committed to building on our culture of inclusion and belonging that reflects the communities where we operate and the patients we serve. We know that diverse backgrounds, cultures, and perspectives make us a stronger and more innovative company, and we are focused on building teams where every employee feels empowered and inspired. Read on to learn more about Biogen.
All qualified applicants will receive consideration for employment without regard to sex, gender identity or expression, sexual orientation, marital status, race, color, national origin, ancestry, ethnicity, religion, age, veteran status, disability, genetic information or any other basis protected by federal, state or local law. Biogen is an E-Verify Employer in the United States.