> Markdown version of [/jobs/ext/2240667-senior-it-auditor](https://www.wearedevelopers.com/jobs/ext/2240667-senior-it-auditor). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Senior IT Auditor

- **Company:** Regeneron
- **Location:** Sleepy Hollow, NY, United States
- **Experience:** Expert
- **Salary:** $93,900.0 - $153,300.0
- **Contract:** Permanent contract
- **Skills:** Microsoft Access, Artificial Intelligence, Amazon Web Services, Microsoft Azure, Software as a Service, Cloud Computing, Control Objectives for Information and Related Technology (COBIT), Cyber Security, Identity and Access Management, Information Technology Audit, Information Technology Operations, Systems Development Life Cycle, Software Vulnerability Management, Data Logging, Data Lakes, Data Analytics, Data Management, Dataiku, GXP, Alteryx
- **Published:** August 26, 2026
- **Apply:** https://www.biospace.com/logon?PipelinedPage=%2Fjob%2F3070478%2Fsenior-it-auditor%3FAction%3DContinueJobApplication%23application-form

## About the Role

* Advanced knowledge of IT infrastructure, applications, cybersecurity, and automated controls

 * Strong understanding of SOX, COSO, COBIT, NIST, GxP, GDPR, and other relevant regulatory and governance frameworks.

 * Strong analytical, criticalthinking, and problemsolving skills, with the ability to independently assess risk and propose solutions.

 * Comfortable working and learning independently and as part of a team

 * Excellent interpersonal, communication and writing skills, strong organizational abilities, and attention to detail are required

 * Experience with data analytical tools (e.g. Dataiku, Alteryx, etc.)

 * Understanding of AI concepts, associated risks (e.g., model governance, data quality, access, ethical use), and internal controls relevant to AIenabled processes.

To be considered for this role, you must have a Bachelor's degree with a minimum of 3 - 4 years of progressive experience in IT audit, information security, or technology risk. CISA, CISM and/or CISSP certifications/license preferred. Experience auditing and evaluating infrastructure, cybersecurity risks/controls and auditing operating systems. Pharmaceutical, life sciences, or other regulated industry experience strongly preferred. Big 4 or public accounting experience preferred but not required.

## Description

The Senior IT Auditor is responsible for contributing towards planning, executing, and reporting on operational IT audits, evaluating risks and controls, including application, infrastructure, cloud, data management, SDLC, change management, and IT operations, in accordance with IIA standards and department methodologies. Perform IT SOX control walkthroughs and testing, along with preparing the related documentation. Assess the effectiveness of cybersecurity controls, including identity and access management, vulnerability management, logging and monitoring, incident response, and security governance.

In this role, a typical day might include the following:

 * Review controls related to cloud computing (e.g., AWS, Azure), SaaS platforms, data lakes, and analytics environments, including shared responsibility models.

 * Design and execute data analyticsdriven audit procedures using tools such as Dataiku or equivalent, to identify anomalies, trends, and control gaps.

 * Apply automation, continuous auditing techniques, and responsible use of AI, where appropriate, to improve audit efficiency, coverage, and insight, including assessing AIenabled business processes and controls.

 * Manage timely completion of audit tasks, including communication of status to the auditee and the Manager/Director.

 * Identify, document, and communicate control deficiencies, root causes, technology risks, and opportunities for improvement, providing practical, actionable recommendations aligned with business objectives.

 * Present the results of audit work to Internal Audit Management and auditees, including practical recommendations to address identified risks and/or weaknesses in internal controls as well as opportunities to enhance operational efficiencies.

 * Prepare clear, concise, and professional audit reports and executivelevel presentations for Internal Audit leadership, management, and key stakeholders.


## Related Videos

- [Blueprints for Success: Steering a Global Data & AI Architecture](https://www.wearedevelopers.com/videos/1577-blueprints-for-success-steering-a-global-data-ai-architecture)
- [How to govern Vibe Coding for the Enterprise](https://www.wearedevelopers.com/videos/100290-how-to-govern-vibe-coding-for-the-enterprise)
- [Rethinking Recruiting: What you didn’t know about Responsible AI](https://www.wearedevelopers.com/videos/1090-rethinking-recruiting-what-you-didn-t-know-about-responsible-ai)

## Related Articles

- [Coffee with Developers - Maria Apazoglou - Making AI understandable for all in production](https://www.wearedevelopers.com/magazine/475-coffee-with-developers-maria-apazoglou-making-ai-understandable-for-all-in-production)
- [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again)
- [Navigating the AI Shift](https://www.wearedevelopers.com/magazine/629-navigating-the-ai-shift)
- [The Biggest German Tech Companies](https://www.wearedevelopers.com/magazine/424-the-biggest-german-tech-companies)
- [Got AI ideas but no money? Here are 10 free ways to level up your AI skills with Google Cloud](https://www.wearedevelopers.com/magazine/600-got-ai-ideas-but-no-money-here-are-10-free-ways-to-level-up-your-ai-skills-with-google-cloud)
- [Now is the time for industrialized software development](https://www.wearedevelopers.com/magazine/601-now-is-the-time-for-industrialized-software-development)