Sr IT Auditor

BioSpace; Hyderabad; Hybrid; INR 1,800,000 - 2,400,000; Full time

Job summary

Regeneron is seeking a Senior IT Internal Audit Compliance & Technology Risk Specialist to join our Internal Audit team in a hybrid work environment in Hyderabad, India. The role focuses on supporting SOX 404 compliance, IT audit programs, and continuous auditing analytics while collaborating with accounting, technology, and operations teams.

You will review IT processes and controls, develop risk-based audit programs, and contribute to IT operational audits in line with IIA standards.

Qualifications

• Minimum 3 years of IT audit, information security, or technology risk experience.
• Experience auditing IT infrastructure, cybersecurity risks, and operating systems.
• Knowledge of SOX, COSO, COBIT, NIST, GxP, GDPR and related governance frameworks.
• Familiarity with data analytics tools and governance concepts.
• Strong interpersonal skills to interact with middle management.

Responsibilities

• Review IT processes and controls within the SOX 404 program.
• Develop continuous auditing analytics to identify weaknesses in compliance.
• Collaborate with Internal Audit to develop risk-based audit programs.
• Contribute to IT operational audits following IIA standards and internal policies.
• Perform SOX 404 IT control testing with supervision.
• Provide governance and control guidance to business functions.

Skills

IT audit

Information security

Technology risk

Data analytics

SOX compliance

AI governance

Education

CISA

CISM

CISSP

Tools

Dataiku

Alteryx

Job description

Build Our Future Together

At Regeneron, we use science and innovation to develop life-changing medicines for people with serious diseases. We are seeking a Senior IT Internal Audit Compliance & Technology Risk Specialist to join our Internal Audit team, supporting our SOX 404 compliance and IT audit programs in a hybrid work environment. In this role, you will contribute to the execution of IT compliance reviews, continuous auditing analytics, and operational audits while collaborating with accounting, technology, operational teams, and Internal Audit colleagues. This position offers the opportunity to contribute to a fast-growing, science-driven organization making a meaningful difference to patients worldwide.

When & Where

Hyderabad, India (Hybrid)

Discover Your Role

• Review IT processes and controls within scope of the company's SOX 404 program and assess control effectiveness.
• Develop and implement continuous auditing analytics to identify weaknesses in compliance-related exposures, operational processes, and internal controls.
• Partner with Internal Audit colleagues to develop risk-based audit programs and support departmental deliverables.
• Contribute to IT operational audits in accordance with Institute of Internal Auditors (IIA) standards, internal policies, and procedures.
• Implement assigned audit sections independently with minimal supervision while maintaining audit quality and compliance.
• Complete SOX 404 IT compliance reviews and testing of controls assigned by Internal Audit management.
• Provide internal control expertise to business functions and departments seeking guidance on governance and control practices.
• Find opportunities to enhance operational efficiencies and support the preparation of audit recommendations and reports for Senior Management and the Audit Committee.

This role requires:

• Minimum 3 years of progressive experience in IT audit, information security, or technology risk.
• Experience auditing and evaluating IT infrastructure, cybersecurity risks and controls, and operating systems.
• Strong understanding of SOX, Committee of Sponsoring Organizations (COSO), Control Objectives for Information and Related Technologies (COBIT), National Institute of Standards and Technology (NIST), Good Practice (GxP), General Data Protection Regulation (GDPR), and related governance and regulatory frameworks.
• Knowledge of IT compliance programs, process reviews, testing of controls, and internal control frameworks.
• Experience using data analytics tools such as Dataiku, Alteryx, or similar technologies.
• Understanding of artificial intelligence concepts, associated risks including model governance, data quality, access, ethical use, and controls relevant to AI-enabled processes.
• Ability to interact autonomously with middle management and provide practical guidance on risk, governance, and control matters.
• Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), and/or Certified Information Systems Security Professional (CISSP) preferred.
• Pharmaceutical, life sciences, or other regulated industry experience preferred.
• Big Four or public accounting experience preferred.

Regeneron is an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion or belief (or lack thereof), sex, sexual orientation, gender identity or expression, gender reassignment, marital or civil partnership status, civil status, pregnancy or parental status, age, disability, nationality, citizenship status, ethnic or national origin, membership of the Traveler community, familial status, genetic information, military or veteran status, or any other characteristic protected under applicable law. Where required, we will provide reasonable accommodation to applicants with known disabilities or chronic illnesses during the recruitment process, unless such accommodation would impose undue hardship.

Where necessary, we disclose salary ranges for roles in all countries in which we operate. The final offer will be determined within the relevant range based on the country of employment, specific role level, and your skills and experience. In some countries, collective bargaining agreements (CBAs) may apply and influence certain elements of pay or benefits.

• annual bonuses or other incentive plans
• equity awards
• pension or retirement benefits
• 401(k) company match
• health and wellness programs
• fitness centers
• insurance benefits (e.g. medical, dental, vision, life and disability)
• paid time off
• family support benefits

For additional information about Regeneron benefits in the U.S., please visit https://careers.regeneron.com/en/working-at-regeneron/total-rewards/. For other locations, additional information will be provided during the recruitment process. If you have any questions, please speak with your recruiter.

Please be advised that at Regeneron, we believe we do our best work when we are together. For that reason, many roles are required to be performed onsite. Please speak with your recruiter and hiring manager for more information about onsite expectations for your role and location.

As part of the recruitment process, certain background checks may be conducted in accordance with the laws of the country where the position is based. The purpose of such checks is to verify certain information prior to the commencement of employment such as identity, right to work and educational qualifications.

For jobs in Canada: this posting is for an existing position.