Associate Manager, IT SOX & Audits

About This Role

The Associate Manager, IT SOX & Audits will be responsible for managing and executing the Company’s IT General Controls (ITGC) testing program in support of SOX compliance, on behalf of management. This role serves as a key liaison between IT, IT Risk Management, the SOX Program Management Office (PMO), Internal Audit, and External Audit, ensuring a well‑coordinated, high‑quality, and surprise‑free SOX execution.

In addition to hands‑on testing, this role will manage and review ITGC testing performed by Co‑Ops or other junior resources, oversee evidence quality, and track remediation through completion. Outside of peak SOX testing cycles, the Associate Manager will support IT audits, risk assessments, and other Internal Audit departmental initiatives.

What You’ll Do

• Lead the end‑to‑end execution of ITGC SOX testing, including planning, walkthroughs, test of design, and test of operating effectiveness across:

  • Logical Access (user provisioning, privileged access, periodic access reviews)

  • Change Management

  • IT Operations (e.g., job scheduling, backups, incident management)

• Execute ITGC testing on behalf of management, ensuring alignment with SOX 404 requirements and external audit expectations.

• Review and validate ITGC documentation, evidence, and testing conclusions to ensure accuracy, completeness, and audit‑ready quality.

• Proactively identify control deficiencies, assess impact, and support management in root cause analysis and remediation planning.
   

Stakeholder & Auditor Management

• Act as a primary point of contact for ITGC‑related interactions with:

  • IT Risk Management

  • SOX PMO

  • External Auditors

• Coordinate walkthroughs, testing schedules, and evidence requests to ensure streamlined communication and minimal disruption to IT teams.

• Ensure no surprises by escalating risks, control issues, or execution challenges early and clearly.
   

Team Oversight & Quality Assurance

• Manage, coach, and review work performed by Co‑Ops or junior staff supporting ITGC testing.

• Provide clear guidance on testing approach, documentation standards, and evidence expectations.

• Ensure consistent application of testing methodologies and adherence to SOX timelines.
   

Continuous Improvement & Readiness

• Identify opportunities to improve efficiency, consistency, and quality within the ITGC SOX testing process.

• Support updates to ITGC scoping, risk assessments, and testing approaches in response to system changes or emerging risks.

• Maintain awareness of evolving SOX and ITGC expectations and incorporate leading practices into execution.

Non‑SOX Period Support

• During non‑peak SOX periods, support:

  • IT audits and integrated audits

  • Targeted risk assessments or advisory reviews

  • Internal Audit departmental initiatives as needed

Who You Are

You are a hands‑on IT SOX professional who understands how to execute ITGC testing rigorously while maintaining strong, collaborative relationships across IT, Finance, and Audit stakeholders. You are detail‑oriented, highly organized, and comfortable operating in a fast‑paced SOX environment with competing deadlines.

Required Skills

• 3-5 years of experience in IT audit, IT SOX compliance, or IT risk advisory

• Strong working knowledge of IT General Controls (ITGC) and SOX 404 requirements

• Experience planning, executing, and reviewing ITGC testing

• Proven ability to manage relationships with External Auditors and cross‑functional stakeholders

• Ability to oversee and review work performed by junior resources

• Strong written and verbal communication skills, including interaction with senior IT and Finance leadership

• Bachelor’s degree in Information Systems, Computer Science, Accounting, or a related field

Preferred Skills

• Consulting, Big Four experience preferred. Life Sciences industry experience

• Professional certifications preferred – CISA, CISM, CISSP, CRISC, CIA.
   

#LI-Hybrid

Additional Information

Base salary offered is determined through an analytical approach utilizing a combination of factors including, but not limited to, relevant skills & experience, job location, and internal equity.

Regular employees are eligible to receive both short term and long-term incentives, including cash bonus and equity incentive opportunities, designed to reward recent achievements and recognize your future potential based on individual, business unit and company performance. 

In addition to compensation, Biogen offers a full and highly competitive range of benefits designed to support our employees’ and their families physical, financial, emotional, and social well-being; including, but not limited to:

• Medical, Dental, Vision, & Life insurances
• Fitness & Wellness programs including a fitness reimbursement 
• Short- and Long-Term Disability insurance
• A minimum of 15 days of paid vacation and an additional end-of-year shutdown time off (Dec 26-Dec 31)
• Up to 12 company paid holidays + 3 paid days off for Personal Significance 
• 80 hours of sick time per calendar year
• Paid Maternity and Parental Leave benefit 
• 401(k) program participation with company matched contributions
• Employee stock purchase plan 
• Tuition reimbursement of up to $10,000 per calendar year 
• Employee Resource Groups participation

Why Biogen?

We are a global team with a commitment to excellence, and a pioneering spirit. As a mid-sized biotechnology company, we provide the stability and resources of a well-established business while fostering an environment where individual contributions make a significant impact. Our team encompasses some of the most talented and passionate achievers who have unparalleled opportunities for learning, growth, and expanding their skills. Above all, we work together to deliver life-changing medicines, with every role playing a vital part in our mission. Caring Deeply. Achieving Excellence. Changing Lives.

At Biogen, we are committed to building on our culture of inclusion and belonging that reflects the communities where we operate and the patients we serve. We know that diverse backgrounds, cultures, and perspectives make us a stronger and more innovative company, and we are focused on building teams where every employee feels empowered and inspired. Read on to learn more about Biogen.

All qualified applicants will receive consideration for employment without regard to sex, gender identity or expression, sexual orientation, marital status, race, color, national origin, ancestry, ethnicity, religion, age, veteran status, disability, genetic information or any other basis protected by federal, state or local law. Biogen is an E-Verify Employer in the United States.