About This Role
The Associate Manager, IT SOX & Audits will be responsible for managing and executing the Company’s IT General Controls (ITGC) testing program in support of SOX compliance, on behalf of management. This role serves as a key liaison between IT, IT Risk Management, the SOX Program Management Office (PMO), Internal Audit, and External Audit, ensuring a well‑coordinated, high‑quality, and surprise‑free SOX execution.
In addition to hands‑on testing, this role will manage and review ITGC testing performed by Co‑Ops or other junior resources, oversee evidence quality, and track remediation through completion. Outside of peak SOX testing cycles, the Associate Manager will support IT audits, risk assessments, and other Internal Audit departmental initiatives.
What You’ll Do
Lead the end‑to‑end execution of ITGC SOX testing, including planning, walkthroughs, test of design, and test of operating effectiveness across:
Logical Access (user provisioning, privileged access, periodic access reviews)
Change Management
IT Operations (e.g., job scheduling, backups, incident management)
Execute ITGC testing on behalf of management, ensuring alignment with SOX 404 requirements and external audit expectations.
Review and validate ITGC documentation, evidence, and testing conclusions to ensure accuracy, completeness, and audit‑ready quality.
Proactively identify control deficiencies, assess impact, and support management in root cause analysis and remediation planning.
Stakeholder & Auditor Management
Act as a primary point of contact for ITGC‑related interactions with:
IT Risk Management
SOX PMO
External Auditors
Coordinate walkthroughs, testing schedules, and evidence requests to ensure streamlined communication and minimal disruption to IT teams.
Ensure no surprises by escalating risks, control issues, or execution challenges early and clearly.
Team Oversight & Quality Assurance
Manage, coach, and review work performed by Co‑Ops or junior staff supporting ITGC testing.
Provide clear guidance on testing approach, documentation standards, and evidence expectations.
Ensure consistent application of testing methodologies and adherence to SOX timelines.
Continuous Improvement & Readiness
Identify opportunities to improve efficiency, consistency, and quality within the ITGC SOX testing process.
Support updates to ITGC scoping, risk assessments, and testing approaches in response to system changes or emerging risks.
Maintain awareness of evolving SOX and ITGC expectations and incorporate leading practices into execution.
Non‑SOX Period Support
Who You Are
You are a hands‑on IT SOX professional who understands how to execute ITGC testing rigorously while maintaining strong, collaborative relationships across IT, Finance, and Audit stakeholders. You are detail‑oriented, highly organized, and comfortable operating in a fast‑paced SOX environment with competing deadlines.
Required Skills
3-5 years of experience in IT audit, IT SOX compliance, or IT risk advisory
Strong working knowledge of IT General Controls (ITGC) and SOX 404 requirements
Experience planning, executing, and reviewing ITGC testing
Proven ability to manage relationships with External Auditors and cross‑functional stakeholders
Ability to oversee and review work performed by junior resources
Strong written and verbal communication skills, including interaction with senior IT and Finance leadership
Bachelor’s degree in Information Systems, Computer Science, Accounting, or a related field
Preferred Skills
Consulting, Big Four experience preferred. Life Sciences industry experience
Professional certifications preferred – CISA, CISM, CISSP, CRISC, CIA.
#LI-Hybrid
Job Level: Professional
Additional Information
The base compensation range for this role is: $89,000.00-$116,000.00
Base salary offered is determined through an analytical approach utilizing a combination of factors including, but not limited to, relevant skills & experience, job location, and internal equity.
Regular employees are eligible to receive both short term and long-term incentives, including cash bonus and equity incentive opportunities, designed to reward recent achievements and recognize your future potential based on individual, business unit and company performance.
In addition to compensation, Biogen offers a full and highly competitive range of benefits designed to support our employees’ and their families physical, financial, emotional, and social well-being; including, but not limited to:
- Medical, Dental, Vision, & Life insurances
- Fitness & Wellness programs including a fitness reimbursement
- Short- and Long-Term Disability insurance
- A minimum of 15 days of paid vacation and an additional end-of-year shutdown time off (Dec 26-Dec 31)
- Up to 12 company paid holidays + 3 paid days off for Personal Significance
- 80 hours of sick time per calendar year
- Paid Maternity and Parental Leave benefit
- 401(k) program participation with company matched contributions
- Employee stock purchase plan
- Tuition reimbursement of up to $10,000 per calendar year
- Employee Resource Groups participation
