Director, Internal Audit, IT and Digital

Scorpion Therapeutics; Bridgewater (MA); On-site; USD 180,000 - 240,000; Full time

Benefits offered by this job

Medical/dental/vision

401(k) match

Equity awards

Life/disability insurance

Learning & development

Job summary

Insmed is seeking a Director of Internal Audit to lead the technology SOX program and oversee IT governance, cybersecurity and data-related controls. You will collaborate with IT, Digital and business leaders to assess risk, coordinate audits and report to executive leadership.

The role emphasizes data analytics and AI-enabled auditing to enhance effectiveness and efficiency, with a focus on regulated environments and external provider oversight.

Qualifications

• Bachelor’s degree in information systems, computer science, cybersecurity, accounting or business administration.
• CISA certification is required.
• Demonstrated leadership in technology audits, IT SOX programs, and cybersecurity risk management.

Responsibilities

• Lead technology SOX program including ITGCs and ITACs.
• Develop and execute technology SOX strategy, risk assessment and annual compliance plan.
• Coordinate with external auditors and co-sourced providers.
• Partner with IT and stakeholders to assess change impacts on control environment.
• Conduct technology audits across cybersecurity, infrastructure, cloud and data governance.
• Provide practical recommendations and support Audit Committee reporting.
• Collaborate with technology leaders to address AI/data governance risks.

Skills

IT audit

IT governance

stakeholder influence

communication

external audits

Education

Bachelor’s degree (Information Systems/CS/Cybersecurity/Accounting/Business)

Tools

CISA

Oracle

Workday

Veeva

Azure

AWS

Job description

Director, Internal Audit

What You’ll Do

• Lead Insmed’s technology SOX compliance program, including IT General Controls (ITGCs), IT Automated Controls (ITACs), interfaces, and key report testing in collaboration with IT.
• Develop and execute technology SOX strategy, risk assessment, testing approach, and annual compliance plan; coordinate activities with external auditors and co-sourced providers.
• Partner with IT and project stakeholders to evaluate impacts of system/application/infrastructure/process changes on the control environment.
• Execute technology-focused audits (cybersecurity, infrastructure, cloud, enterprise applications, digital platforms, data governance, emerging technologies) and oversee engagement phases per Internal Audit methodology and Global Internal Audit Standards.
• Assess technology governance/cybersecurity/risk management/internal controls and provide practical recommendations; support executive and Audit Committee reporting.
• Partner with Technology, Digital, Data, Information Security, and business leaders to identify, assess, and respond to technology risks; provide independent perspectives for AI governance, data governance, and digital transformation initiatives.
• Champion data analytics/automation/AI-enabled auditing to improve audit effectiveness and efficiency.

Who You Are

• Bachelor’s degree (Information Systems, Computer Science, Cybersecurity, Accounting, Business Administration, or related) + 12+ years progressive experience in IT audit/technology risk/cybersecurity/internal audit/advisory.
• Required: CISA.
• Demonstrated leadership in technology audits, IT SOX programs, and cybersecurity/technology risk management.
• Strong knowledge of ITGCs/ITACs, cybersecurity frameworks, cloud environments, and technology governance; experience in regulated environments.
• Ability to influence stakeholders; excellent communication/presentation.
• Experience managing external service providers/co-sourced audit relationships.

Nice to Have

• CPA/CIA/CISSP/CRISC/CDPSE or similar; life sciences industry experience; familiarity with Oracle, Workday, Veeva, ServiceNow, Azure, AWS, and related technologies.

Benefits (highlights)

• Medical/dental/vision, mental health support, annual wellbeing reimbursement, EAP; paid time off; 401(k) match, equity awards, ESPP; company-paid life/disability insurance; learning and development programs.