Senior Analyst for IT Application and General Controls

Sanofi; Telangana; On-site; INR 1,800,000 - 3,200,000; Full time

Benefits offered by this job

Health and wellbeing benefits

Gender-neutral parental leave

Global exposure

Job summary

Sanofi is seeking a Senior Analyst – IT Application & General Controls (ITAC/ITGC) in Hyderabad. The role supports Internal Control Global Testing COE, coordinating SOX and non-SOX testing across IT controls, access management, and control owners.

You will analyze SOC reports, drive continuous improvement, and collaborate with internal and external stakeholders to strengthen the control environment in a fast-paced, global pharma setting.

Qualifications

• 2+ years in auditing SOX IT Application Controls and IT General Controls
• Experience with SOX compliance requirements and testing methodologies
• Expert knowledge of ITGC, ITAC, and ITDs; UAM and SOD
• Knowledge of CSRD frameworks and reporting processes

Responsibilities

• Execute ITAC and ITGC testing as part of the IC P CoE, under ITAC/ITGC leads
• Set up and conduct SOX and CSRD ITAC & ITGC testing with external auditors
• Analyze SOC reports for in-scope third parties and test high-risk controls for digital solutions
• Manage control environment by understanding scope, access, and evidence collection
• Contribute to testing orchestration, document evidence, and monitor delays or issues

Skills

SOX ITAC/ITGC

IT Audit

SOC reports

Education

Engineering degree in Computer Sciences

Tools

SAP

Oracle

Workday

Job description

Job title: Senior Analyst – IT Application & General Controls (ITAC/ITGC)

Location: Hyderabad

About the job

Join Sanofi's Internal Control & Processes Testing Center of Excellence (IC&P CoE) and play a pivotal role in safeguarding the financial integrity and digital control environment of one of the world's leading pharmaceutical companies. This is your opportunity to be at the intersection of IT audit excellence, digital transformation, and continuous innovation — with real, measurable impact.

Internal Control is a cornerstone of Sanofi's governance framework, providing reasonable assurance across three critical dimensions:

• Operational excellence — effectiveness and efficiency of operations
• Reporting integrity — reliability of financial and management information
• Regulatory compliance — adherence to applicable laws, regulations, and Sanofi policies

Our Hubs are a crucial part of how we innovate, improving performance across every Sanofi department and providing a springboard for the amazing work we do. Build a career and you can be part of transforming our business while helping to change millions of lives. Ready? As Internal Control Global Testing COE Senior Specialist within our Internal Control Global Testing COE, you’ll Support Internal Control Global Process Leads in the creation / update of test scripts for SOX & non-SOX testing through constructive feedback and sharing of best practices. Coordinate the CSA campaign by consolidating the Local Process Owners list, updating the tools and following the CSA completion and sign-off.

We are an innovative global healthcare company with one purpose: to chase the miracles of science to improve people’s lives. We’re also a company where you can flourish and grow your career, with countless opportunities to explore, make connections with people, and stretch the limits of what you thought was possible. Ready to get started?

Main responsibilities:

• As a key pillar of Sanofi's 2nd Line of Defense, the IC&P CoE supports and challenges operational standards, guides business teams, and reports directly to ExCom on control implementation and action plans. Reporting to the IC&P CoE ITAC/ITGC Lead, the ITAC /ITGC Specialist executes both IT Application Control (ITAC) and IT General Control (ITGC) testing activities. For ITAC scope, this includes IT Dependent controls (automated controls, key reports, interfaces), User Access Management (UAM) and Segregation of Duties (SOD) in coordination with external auditors, SOX entities, and BSC System Controls Leads.For ITGC scope, this includes Digital SOX ITGC and High-Risk testing activities in coordination with external auditors, Digital control owners, and Digital Risk & Compliance Leads.

• Set up and conduct SOX and CSRD ITAC & ITGC testing in coordination with external auditors, SOX entities, and BSC System Controls Leads.

• Analyze SOC report for in-scope third parties. Conduct testing of High Risk controls for Digital solutions in compliance with Digital Control Framework. Identify optimization & continuous improvement opportunities.

• MANAGE CONTROL ENVIRONMENT: Understand in scope applications, infrastructure and third parties’ specificities. Review prior year test results and Sanofi methodology. Obtain access to applicable Sanofi systems, including Sanofi GRC system.

• MANAGE CONTROL ACTIVITIES (CSA, IC Testing, SOX testing): Contribute to process walkthroughs and interviews during the Design phase to map control flows and identify ITDs. Submit evidence requests to Control owners in alignment with agreed calendar and scope. Monitor & report any delay or issues encountered impacting testing orchestration.

• Execute and document ITGC and ITAC testing. Analyze SOC reports based on Sanofi's review methodology, report CUEC and CSOC and ensure proper testing. Conduct High risk control Testing on the scope of non-SOX IT systems.

• DRIVE CONTINUOUS IMPROVEMENT: Identify automation opportunities within SOX, CSRD (Corporate Sustainability Reporting Directive) and IC testing processes.

About you

• Experience: Minimum 2+ years of experience auditing companies in SOX IT Application Controls and IT General Controls audit. Graduated College level in Audit, IT Audit or similar

• More than 2 years in IT Audit in auditing firm or private companies in SOX IT Application Controls and IT General Controls audit. Demonstrated knowledge of SOX (Sarbanes-Oxley) compliance requirements and testing methodologies. Expert knowledge of IT General Controls (ITGC), IT Application Controls (ITAC) and IT Dependent controls (ITDs). Expertise in automated controls, key reports, interfaces, UAM and SOD

• Experience with SOC report analysis and PCAOB requirements. Knowledge/Awareness or experience in Accounting / Financial reporting. Understanding of CSRD frameworks and reporting processes. Experience with IT Core Model solutions and ERP systems (SAP, Oracle, Workday, etc.). Experience with IT infrastructure layers (operating systems, databases). Professional certification (CISA, CIA or equivalent) preferred. Background with Big 4 audit methodology preferred

• Education:Engineering degree in Computer Sciences.

• Core competencies: IT Application & General Controls (ITAC/ITGC) — design, testing, and remediation. Strong critical thinking and problem-solving skills. Financial systems and IT risk domains (GxP, Privacy, Security, SOX). SOC report analysis and third-party risk assessment. Data analytics, automation tools, and continuous monitoring techniques.

• Interpersonal: Strong critical thinking and structured problem-solving. Confident stakeholder management and influencing skills across all levels. Excellent written and verbal communication in English. Adaptability and resilience in a fast‑paced, evolving environment

• Languages: Must be fluent (written/spoken) in English.

Why choose us?

• Bring the miracles of science to life alongside a supportive, future-focused team.

• Discover endless opportunities to grow your talent and drive your career, whether it’s through a promotion or lateral move, at home or internationally.

• Enjoy a thoughtful, well-crafted rewards package that recognizes your contribution and amplifies your impact.

• Take good care of yourself and your family, with a wide range of health and wellbeing benefits including high-quality healthcare, prevention and wellness programs and at least 14 weeks’ gender-neutral parental leave.

• Part of Global Finance services in Sanofi, gives a great opportunity to work and have a enriching experience in Account to Report domain area.

• Opportunity to also have a Global exposure in accounting and experience on working for multiple geographies.