Senior Auditor - IT
Role details
Job location
Tech stack
Job description
Joining us is a chance to do important work that creates change and shapes the future of healthcare. Thinking differently is what we do best. To us, change equals opportunity. Every day, our colleagues are challenging what's possible and making headway to innovate new treatment pathways to advance patient outcomes and set new standards of care. The Senior Auditor - IT is responsible for executing complex risk-based IT audits, IT SOX testing, and advisory activities across enterprise systems, infrastructure, applications, and technology-enabled business processes. This role evaluates the design and operating effectiveness of IT general controls, application controls, cybersecurity, data governance, change management, and emerging technology controls, including the governance, security, and responsible use of artificial intelligence and automation tools. The Senior Auditor - IT documents results in accordance with Internal Audit methodology and partners with stakeholders to identify practical remediation actions that strengthen the risk and control environment., Audit Execution & Methodology
- Execute assigned IT audits and advisory reviews in accordance with the annual audit plan, Internal Audit methodology, and applicable professional standards.
- Develop risk-based audit work programs, perform walkthroughs, evaluate control design, and complete testing to assess operating effectiveness.
- Prepare clear, complete, and well-supported workpapers, including narratives, flowcharts, testing results, and evidence of review-ready conclusions.
IT SOX & Control Testing
- Perform IT SOX testing for IT general controls, application controls, key reports, interfaces, privileged access, change management, and computer operations.
- Assess control deficiencies, document potential impact, support severity evaluation, and communicate results to audit leadership and process owners.
- Coordinate with management, external auditors, and control owners to support timely evidence requests, testing schedules, and remediation follow-up.
Risk Assessment, Findings & Remediation
- Support IT risk assessments by identifying key technology, cybersecurity, data, third-party, and operational risks relevant to audit scope and business objectives.
- Analyze exceptions, identify root causes, and draft practical, risk-based recommendations that are clear, actionable, and aligned with management accountability.
- Track remediation activities, validate corrective actions, and escalate delays or recurring issues to audit leadership as appropriate.
Technology, Cybersecurity & Project Reviews
- Evaluate controls across enterprise applications, cloud platforms, infrastructure, identity and access management, cybersecurity, data privacy, and business continuity processes.
- Participate in pre- and post-implementation reviews for significant system changes, technology initiatives, and process transformations.
- Assess risks and controls related to emerging technologies, including artificial intelligence, machine learning, automation, and data-driven tools, with focus on governance, access, data integrity, model oversight, and responsible use.
- Apply relevant frameworks and standards, such as COBIT, NIST, ISO 27001, COSO, and ITIL, when assessing control design and risk coverage.
Analytics, Automation & Continuous Improvement
- Leverage analytics, automation, and AI-enabled tools to improve audit planning, testing efficiency, exception analysis, documentation quality, and continuous monitoring, while maintaining appropriate professional judgment and confidentiality.
- Identify opportunities to simplify testing, improve documentation quality, and increase consistency across audit workpapers and AuditBoard records.
Stakeholder Engagement & Communication
- Build effective working relationships with IT, Finance, business process owners, and external auditors to facilitate timely audit execution and constructive issue resolution.
- Communicate audit status, requests, observations, and recommendations clearly and professionally through meetings, workpapers, and draft report language.
- Prepare concise summaries of audit results for review by audit leadership, including risk implications, root cause themes, and management action plans.
Collaboration & Professional Development
- Demonstrate sound judgment, accountability, integrity, and attention to detail while managing multiple priorities and deadlines.
- Maintain current knowledge of IT audit practices, SOX requirements, cybersecurity risks, emerging technologies, and relevant professional standards.
Requirements
Bachelor's degree in Information Technology, Computer Science, Accounting, or related field. Certifications: CISA required. CIA/CPA a plus. Experience: 5+ years IT audit / IT SOX experience (pharma/med tech industry experience preferred). Include relevant skills such as:
- Expertise in ITGCs, application controls, cybersecurity, and risk frameworks; proficiency with analytics/automation and AuditBoard/Optro.
- Strong communication, project leadership, global collaboration, integrity, and attention to detail.
- Demonstrated ability to produce executive-ready materials; strong writing, structure, and audience awareness.
- Strong analytical/problem-solving skills; proven ability to lead workstreams and collaborate across global teams.
- Ability to manage multiple priorities in a fast-paced environment.
- Familiarity with emerging technology risks, including AI governance, responsible AI practices, data privacy, cybersecurity, and related control considerations.
Tools And Equipment Used This may include:
- Microsoft Office products
- AuditBoard/Optro
- Oracle
- PowerBi
- General office equipment: Computers, printers, telephone systems, video conferencing tools.
Benefits & conditions
This role is hybrid between Princeton, NJ and remote. Office days are Tuesday, Wednesday and Thursday. Salary Pay Range: $81,650.00 - $112,700.00 USD Salary Our salary ranges are determined by role, level, and location. Individual pay is determined by several factors including job-related skills, experience, and relevant education or training. In addition to base pay, employees may be eligible for bonus, commission, equity or other variable compensation. Your recruiter can share more about the specific salary range for your preferred location during the hiring process. Additional Description for Pay Transparency: Subject to the terms of their respective plans, employees and/or eligible dependents are eligible to participate in the following Company sponsored employee benefit programs: medical, dental, vision, life insurance, short- and long-term disability, business accident insurance, and group legal insurance, and savings plan (401(k)). Subject to the terms of their respective policies and date of hire, Employees are eligible for the following Integra LifeSciences is an equal opportunity employer, and is committed to providing equal employment opportunities to all qualified applicants and employees regardless of race, marital status, color, religion, sex, age, national origin, sexual orientation, physical or mental disability, or protected veteran status. This site is governed solely by applicable U.S. laws and governmental regulations. If you'd like more information on your rights under the law, please see the following notices: | Integra LifeSciences is committed to provide qualified applicants and employees who are disabled veterans or individuals with disabilities with needed reasonable accommodations in accordance with the . If you have difficulty using our online system due to a disability and need an accommodation, please email us at careers@integralife.com. Unsolicited Agency Submission Integra LifeSciences does not accept unsolicited assistance from search firms for employment opportunities. All CVs/resumes submitted by search firms to any employee at our company without a valid written search agreement in place for this position will be deemed the sole property of our company. No fee will be paid in the event a candidate is hired by our company as a result of an agency referral where no pre-existing agreement is in place. A formal written agreement is required before engaging any agency, and it must be executed and authorized by the Vice President, Talent Acquisition. Where agency agreements are in place, introductions (the initial sharing of a candidate's name, resume, or background) are position-specific and may only occur within the scope of that approved agreement. Please, no phone calls or emails., + $81,650-112,700 per year Changing lives. Building Careers. Joining us is a chance to do important work that creates change and shapes the future of healthcare. Thinking differently is what we do best. To…
- 26 days ago